# Roles and Permissions

The following are the roles and functions the roles can call in Level v2:

| Role                  | Users                                                                                    | Permissions                                                                                                                                                                                                                     |
| --------------------- | ---------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| ADMIN\_MULTISIG\_ROLE | - Admin multisig only                                                                    | <p><code>StrictRolesAuthority.removeUserRole()</code><br><br><code>LevelMintingV2.removeMintableAsset()</code><br><br><code>LevelMintingV2.removeRedeemableAsset()</code><br><br><code>LevelMintingV2.removeOracle()</code></p> |
| VAULT\_MINTER\_ROLE   | - LevelMintingV2 contract only                                                           | `BoringVault.enter()`                                                                                                                                                                                                           |
| VAULT\_REDEEMER\_ROLE | <p>- LevelMintingV2 contract<br>- RewardManager contract<br></p>                         | `BoringVault.exit()`                                                                                                                                                                                                            |
| PAUSER\_ROLE          | <p>- Admin multisig<br>- Operator multisig<br>- Hexagate gatekeepers<br></p>             | <p><code>PauserGuard.pauseSelector()</code><br><br><code>PauseGuard.pauseGroup()</code></p>                                                                                                                                     |
| UNPAUSER\_ROLE        | - Admin multisig only                                                                    | <p><code>PauserGuard.unpauseSelector()</code><br><br><code>PauserGuard.unpauseGroup()</code></p>                                                                                                                                |
| VAULT\_MANAGER\_ROLE  | <p>- LevelMintingV2 contract<br>- RewardManager contract<br></p>                         | <p><code>BoringVault.manage()</code><br><br><code>BoringVault.increaseAllowance()</code></p>                                                                                                                                    |
| GATEKEEPER\_ROLE      | <p>- Admin multisig<br>- Operator multisig<br>- Hexagate gatekeepers<br></p>             | `LevelMintingV2.disableMintRedeem()`                                                                                                                                                                                            |
| REWARDER\_ROLE        | - Treasury multisig only                                                                 | `RewardsManager.reward()`                                                                                                                                                                                                       |
| STRATEGIST\_ROLE      | <p>- Operator multisig<br>- LevelMintingV2 contract<br>- RewardsManager contract<br></p> | <p><code>VaultManager.deposit()</code><br><br><code>VaultManager.depositDefault()</code><br><br><code>VaultManager.withdraw()</code><br><br><code>VaultManager.withdrawDefault()</code></p>                                     |
| MINTER\_ROLE          | N                                                                                        | `LevelMintingV2.mint()` (if not public. note that on launch, `mint()` will be public)                                                                                                                                           |
| REDEEMER\_ROLE        | N (KYC-ed external redeemers)                                                            | `LevelMintingV2.initiateRedeem()` (if not public. note that on launch, `initiateRedeem` will not be public)                                                                                                                     |

#### Trusted Addresses:

* *Admin Multisig*
  * 5/8 Gnosis Safe
    * All signers are cold wallets
  * 4 keys held by internal team members, 4 keys held externally
    * Team cannot sign transactions unilaterally
    * External signers are trusted members of the security community (ie Spearbit)
  * Internal team members have separate signing devices
    * At least two signers must validate that the transaction hashes being signed on the UI match what the wallet sees
  * Used to:
    * Upgrade contract implementations
    * Assign and removes roles
    * Adjust protocol configuration
* *Operator Multisig*
  * 2/5 Gnosis Safe
    * 4/5 signers are cold wallets
  * All keys held by internal team members
  * Used to:
    * Manage funds custodied by the BoringVault using the VaultManager smart contract
    * Send excess yield to the Treasury multisig
* *Treasury Multisig*
  * 3/4 Gnosis Safe
    * All signers are cold wallets
  * All keys held by internal team members
  * Used to:
    * Receive USDC/T yield accrued by the protocol
    * Mint lvlUSD using these funds and reward it to slvlUSD
    * Claim rewards on behalf of the BoringVault for supplying to lending protocols like Aave and Morpho
* Hexagate Gatekeepers
  * EOA stored on AWS
  * Automatically run actions based off critical/high monitoring alerts from Hexagate, including:
    * If dollar value of lvlUSD reserves returned by LevelReserveLens dips below the dollar value of lvlUSD supply
    * If Hexagate detects any suspicious contracts deployed that could be potential attackers