> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dolfinai.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Gmail bill capture & role-based access

> Surface bills straight from a connected Gmail inbox, route bills through an approval workflow, and scope access with organisation roles.

<Update label="2026-05-21" tags={["Feature","Release"]} description="Bill capture and access control">
  ## New

  ### Gmail bill capture

  [Connect a Gmail account](/api-reference/endpoint/gmail/begin-gmail-oauth) via OAuth to automatically surface bills from your inbox. Trigger a [sync](/api-reference/endpoint/gmail/trigger-a-gmail-sync) or [backfill](/api-reference/endpoint/gmail/start-a-gmail-backfill), review extracted [bill candidates](/api-reference/endpoint/gmail/list-gmail-bill-candidates), then [import](/api-reference/endpoint/gmail/import-selected-gmail-candidates) the ones you want or dismiss the rest. Imported attachments flow straight into the bill processing pipeline.

  ### Bill approval workflow

  Bills now move through a proper review-and-approval flow. Submit a bill for review, then approve or reject it, with email notifications to the right people and a full audit trail of who did what and when.

  ### Role-based access control

  Scope what each user can do with organisation-level roles. Assign roles when adding users, and Dolfin enforces them on every endpoint so Admins, members, and read-only users see only what they should.

  ## Updates

  ### Simpler auth-code exchange

  The user auth-code endpoint now requires only a `userId` — the rest of the session context is resolved server-side — making it easier to drop a known user straight into an authenticated session.
</Update>