navan-enterprise-rbac

# Navan Enterprise RBAC ## Overview Navan's enterprise tier provides granular role-based access control, configurable travel policies, and multi-tier approval workflows. The platform enforces in-policy vs out-of-policy bookings at the point of purchase — travelers see policy-compliant options highlighted and must justify out-of-policy selections through approval chains. This skill covers the admin role hierarchy, policy rule configuration, department-scoped access, and API-driven policy management. ## Prerequisites - Navan enterprise account with Global Admin or Travel Admin access - OAuth 2.0 credentials with admin-scoped permissions (see `navan-install-auth`) - Organizational hierarchy defined (departments, cost centers, reporting lines) - Dedicated Customer Success Manager contact (included with enterprise tier) ## Instructions ### Step 1: Understand the Navan Role Hierarchy ``` Global Admin ├── Travel Admin — Manage travel policies, view all bookings ├── Expense Admin — Manage expense policies, approve/reject reports ├── Finance Admin — View spend analytics, export financial reports ├── Department Manager — Approve bookings/expenses for direct reports ├── Arranger — Book travel on behalf of other employees └── Traveler — Book own travel within policy, submit expenses ``` | Role | Book Travel | Approve | View All Bookings | Edit Policies | Manage Users | |------|-------------|---------|-------------------|---------------|-...