Teaching officers “where to click” is useless if everyone shares the admin password. Philippine lending shops from Caloocan to Cagayan de Oro often confuse training with access control. This guide is about staff roles and branch permissions: who can disburse, who can reverse, who can see other branches, and who only posts small repayments.
Soft note: role-based access in PesoLend features is part of running a serious LMS. This is not a cloud security white paper and not a claim of certifications.
Role starter pack for PH money lenders
- Cashier: post routine repayments, view assigned branch borrowers, print receipts
- Loan officer: create borrowers/loans in pipeline, view owned book, request disbursement
- Branch supervisor: checker approvals, view branch PAR lists, manage officer assignments
- Branch manager: higher thresholds, reversals with reason, cross-officer visibility in branch
- HQ ops: multi-branch read, product config (controlled), user administration
Names can vary. The separations should not.
Least privilege in peso terms
If a new cashier can reverse a ₱50,000 (~$875) repayment on day one, your risk is not theoretical. If a collector can download all ID scans for every Metro Manila branch, your privacy risk is not theoretical. Start tight. Open deliberately.
Branch scoping
Multi-branch PH lenders should default users to home branch data. Cross-branch posting can exist with reason codes. Cross-branch browsing belongs to supervisors and HQ. This pairs with borrower CRM ownership and maker-checker thresholds without duplicating those essays.
Joiner-mover-leaver
- Joiner: unique user, role template, branch, MFA if you use it
- Mover: change branch/role same day as HR move; transfer borrower ownership
- Leaver: disable login before collecting the laptop; reassign book within 24 hours
A resigned officer with live access in Pasig is an incident waiting to be written.
Quarterly access review
Export users. Confirm each still works there. Remove dormant accounts. Check for shared users. Present exception count to the owner. Forty minutes every quarter beats one fraud review.
More on modules: features. Plans: pricing. Configure roles after login.
Pilot
Pick one branch. Convert shared logins to personal users in two days. Apply cashier vs officer vs supervisor. Measure posting errors and approval lag for two weeks. Then clone to the next Philippine site.
Permission matrix you can print
Create a one-page matrix hanging in the back office in Makati, Cebu, and Davao alike:
- Create borrower: officer yes / cashier no
- Request disburse: officer yes / cashier no
- Approve disburse: supervisor or manager
- Post repayment ≤ threshold: cashier yes
- Post repayment > threshold: cashier make + supervisor check
- Reverse transaction: manager
- Edit product rules: HQ ops only
- Export ID documents: manager / HQ limited
- View other branch: supervisor+ or HQ
Print beats tribal knowledge when float staff arrive for holiday coverage during Holy Week and year-end.
Shared device reality
Some Philippine branches share a counter PC. That is fine if users switch accounts. It is not fine if they share one session all day. Teach lock screen habits. Sixty seconds of switching users prevents a cashier from posting under an officer identity — a classic audit mess when something goes wrong in Pasay.
Segregation examples with pesos
Officer A originates a ₱30,000 (~$525) loan. Supervisor B checks release. Cashier C pays out and later posts the first ₱2,500 (~$44) installment. If A also posts “repayments” to hide a problem, roles failed. If C can edit the schedule interest rate, roles failed. Walk these examples in training until people laugh nervously — that means they recognized themselves.
Metrics for the owner
Monthly: number of active users, dormant users disabled, shared accounts found (target zero), average approval lag, reversal count by user. Owners abroad reviewing a Philippine book should see these beside portfolio numbers. Access hygiene is part of lending hygiene.
Emergency access without permanent admin
Sometimes a branch manager in Batangas is sick and approvals stall. Use temporary elevation with an end time, not a permanent admin gift. HQ ops grants a 24-hour checker role, logs the reason, and auto-expires. Philippine shops that skip expiry accumulate “temporary” gods who never lose power.
Training week that includes access
When you teach new loan officers the LMS in one week, day one should include logging in as themselves, failing to open a forbidden screen, and requesting the right role. Experiencing a clean denial teaches better than a PDF policy. Pair with a short quiz: who can reverse? who can export IDs? who can edit products? Perfect scores before first live disbursement.
Also document break-glass: if the LMS is unreachable, paper posting rules and next-day catch-up — without creating a permanent shadow system. Connectivity blips happen outside Metro Manila; shadow Excel empires happen when break-glass is undefined.
FAQ for Philippine desks
Does this replace our paper forms? Not overnight. Run parallel for two weeks in one branch — for example San Juan or a Cebu satellite — then cut over when the LMS file is trusted.
What about provinces with weak signal? Post when back online the same day. Do not invent a week of notebook truth without catch-up rules.
Can HQ abroad change roles? Prefer PH-based admins for role changes affecting cashiers who handle peso cash. Overseas owners can review reports without holding everyday permission keys.
How does this tie to PesoLend? Use features to see module shape, pricing for plan fit, and app login to configure live records. Keep competitor names out of your internal training docs too — teach workflows, not rival logos.
Operational excellence in Philippine microlending is mostly boring consistency: same roles, same vault habits, same calendar, same co-maker truth in every branch from NCR through Mindanao. That boredom is profitable.
Keep the matrix updated whenever a Philippine branch opens or a product threshold changes.
Closing
Staff roles for Philippine lenders are how cashiers, officers, and managers share one LMS without sharing one password. Scope by branch, separate make/check powers, and retire leavers fast.
Set roles with least privilege: https://pesolend.com/app/login.