QuickBooks permissions let you permit — or restrict — your users’ activities in QuickBooks. If you have more than a couple of employees’ who use QuickBooks, you probably take advantage of this feature.

When I posted “How to Restrict User Access in QuickBooks” a few years ago, it elicited scores of questions and comments. My thanks go out to all those commenters. Here’s a summary of those comments and answers:

What is possible to restrict in QuickBooks (partial list):

You can restrict…

  • Access by module (Sales, Payroll, etc.)
  • Reporting
  • Ability to change or delete existing transactions
  • Access to especially sensitive information like bank accounts, customer credit cards
  • Access to financial reports

What is impossible to restrict in QuickBooks (any edition):

You cannot restrict…

  • Name-based access (e.g. you can’t allow transaction entry or reporting for some customers / jobs / employees / vendors / sales reps, while restricting others)
  • Changing other users’ entries, but allowing you to change your own entries
  • Access to only selected reports (as opposed to whole categories of reports)
  • Access based on payroll group, weekly vs. bi-weekly, for example
  • Date-based access (e.g. running reports or viewing transactions only data before or after a certain date)
  • Account-type access (e.g. able to view P&L accounts but not BS accounts)
  • Viewing of the item list
  • Access to bank accounts without access to paychecks
  • Field-level access, e.g. disallowing a sales rep from changing the sales rep field, or disallowing access to inventory cost while retaining access to QOH
  • Allowing the entry or reconciliation of some bank accounts or credit cards, but not others
  • Entering a transaction without being able to see the previous entries also

There are many examples of restrictions that are possible in Enterprise edition but not in Pro or Premier editions. Here are a few differences that came out of the comments.

What is possible to restrict in Enterprise, but impossible to restrict in Pro or Premier:

  • Preventing the viewing the Employee Center’s list of employees
  • Allowing access to estimates without also giving access to other sales/receivables functions
  • Allowing access to payments without also giving access to invoicing
  • Allowing creation of purchase orders but no other A/P entries
  • Creating classes
  • View-only mode for non-financial reports, without also giving the ability to enter transactions (e.g. you can’t keep access to A/R reports without also giving access to A/R transactions)

Which of the “impossibilities” listed above do you think Intuit should definitely address in a future version?

Please follow and like us:

69 thoughts on “User Permissions: What Is Possible, Impossible to Restrict

  1. I have all the permissions the administrator can give me. I can print bill payment vouchers for check payments, but not for vendors paid by credit card. Any ideas? Thanks.

    Reply
  2. QuickBooks Enterprise version comes with flexibility to define user access. You can assign view only access with print access however in Pro and Premier you can either assign create access or no access. Full access/Partial access or no access.

    Reply
  3. My assistant was able to create and memorize an A/P report. But she could not go back into that same A/P report. It said she needs “Sensitive Financial Reporting” permission. I do not want her to have that full permission because with it she could see the bank accounts and P&L etc. I feel she should be able to create, memorize, access, update and print everything to do with A/P. Is there a way for my assistant to do this that I am not aware of? Does the 2016 version allow this? Thanks for any help you can give.

    Reply
    • Lorri,

      The discussion above is only for the desktop editions of QuickBooks. I don’t have a listing of what permissions can be allowed/disallowed for QuickBooks Online. Thanks for the question.

      Reply
    • Reshma,

      In Enterprise, there is an access control specifically for Purchase Orders. So you should be able to turn off access to all other A/P functions except for that. This level of restriction is not possible in Pro or Premier. Thanks for your question.

      Reply
  4. @Tucker I am using QB PoS and I operate a salon where I have defined the stylists as customers (but they login as users and post to customer ‘on Account’ in QB) so that at end of day they give the team leader their daily collections. The team leader thereafter reconciles the ‘On Account’ balances with the cash received from each customer/stylist/user.
    The system restrictions however are not sufficient enough to prevent:
    1) a user/stylist from clicking the ‘Cash’ button and entering a cash sale yet it needs to be validated by the team leader first.
    2) a user from mapping/selecting any customers of their choice
    Is there a way to restrict this.

    Reply
  5. Shannon,

    I’m having an issue with allowing specific users access to add/edit classes. Can you help with this? I don’t see an area in user permissions that would indicate the ability to add/edit classes.

    thanks in advance,
    Marcus Mire

    Reply
    • Hi Marcus,

      If you are using Enterprise, you can modify a role to allow/disallow adding or editing the class list. If you are using an edition other than Enterprise, that’s not possible. Thanks for your question.

      Reply
    • Hello Tahir,

      Yes, you can change the user’s permissions to not have access to Sales and Accounts Receivable. If you are using Enterprise, you can restrict it more closely to allow for transaction entry but not customer creating. Thanks for your question.

      Reply
  6. Is there a way to grant access to create accounts but not access to view financial reports. I’m using the QuickBooks Enterprise Solutions Pro Services Edition. Thanks

    Reply
  7. We have a couple of different bank accounts that we use to issue checks. Is it possible to restrict a user’s access to only be able to access one of the accounts? For example, I would like to have the user access checking account A, but not checking account B or C.

    Reply
  8. Is there a version that will allow permission to ONLY view customer balances and transactions, but not to enter or change existing transactions?

    Reply
    • Hi Jenny,

      In Enterprise, you can enable ‘view’ but disable ‘create’, ‘modify’, and ‘delete’ for A/R transactions. That is not possible in Pro or Premier. Thanks for your question.

      Reply
  9. In Enterprise, is there a way to limit access by class? For example, allowing a receivables clerk to only see the customers and receivables information for the class that she uses?

    Reply
  10. Hi John,
    WE are new to QB 2017 🙂 it has been a long time coming. But Finally we are here. I have set permissions up and people can still see payroll options and employee information. Have I done something wrong?

    Reply
    • I would like to see an answer to this as well. I am having a problem with another employee who is looking at my time sheet and has changed one of my comments

      Reply
  11. Hi Shannon. I’m using QB Premier. I want my office staff to be able to enter sales orders. That “open sales orders” report is what they use for production (we are a manufacturing facility). But I have to give the user “sensitive financial reports” access. I just want them to be able to run that report without being able to see the banking info and financial documents. Any idea how I can accomplish this?

    Reply
  12. I have permissions set in Enterprise giving a user access to one bank account; however, if you go to Write Checks, you can change the bank account at the top and the user can now scroll back through checks written in a different bank account. Is there a way to allow users access to write checks from the one account, yet still preventing them from seeing checks written in other accounts?

    Reply
  13. Is there any way to restrict someone from adding/deleting/changing transactions, but still be able to create and view reports and to see transactions without making changes to them? My boss wants a copy of QB put on his computer, but he doesn’t know how to use it. I want to be sure he doesn’t inadvertently change or enter something in the program. He just wants to be able to run reports. Is this possible?

    Reply
    • Hi Sharon,

      If you are using Enterprise, then yes, you can restrict like that. But I’m guessing you’re using Pro or Premier, and you can’t directly restrict like that, sorry. Thanks for your question.

      Reply
        • Hi Marsha,

          Yes, so what you do is edit each role that your users use. Click around and give Partial access instead of Full access, and don’t check the Delete box. That will lock your users out of being able to delete what you don’t want them to delete. Thanks for your question.

          Reply
  14. Hi Sharon,
    We are using Enterprise and need to restrict all access to only one of our bank accounts. Is that possible? Thanks for your help!

    Reply
  15. I have a human resource issue I think, but not getting any help from the owner of the company. One of the employees does not like me, and she is looking at my time sheets, and has emailed the entire office about my hours being billable versus non billable. And last week, she actually changed one of my notes and put in an obnoxious comment. Why are other employees allowed to see my time sheet, let alone be able to change anything on it? I am very concerned. I am not staying with the company, but I want to know how this can be prevented in the future.

    Reply
    • Hi Mel,

      Dang, that’s awful. Sorry to hear that. You didn’t say whether she is the QuickBooks admin, or what kind of user permissions she has been assigned in QuickBooks. Sounds like she has payroll privileges and is using them to your detriment. You could ask the admin to remove payroll privileges for her user account. Thanks for your question.

      Reply
  16. Is it possible in Enterprise to set up users so that they can’t see pop up reminders? We don’t want most users to see a payable reminders that pop up. Thank you.

    Reply
    • Hi Ellen,

      If someone didn’t have Payables access in their user permissions, would it pop up payables reminders? If you click Edit / Preferences / Reminders, you can turn off reminders for different A/P situations on a company-wide level. You can’t specify it user-by-user though. Thanks for your question.

      Reply
  17. We recently suspected a problem with an employee falsifying records in QB. We immediately restricted the employee’s access to QB pending further investigation. The employee has now stolen the computers containing the QB application, company file and backups. What we need to know is where are the user access restrictions recorded? Can he restore a QB backup prior to the imposition of access restrictions and regain his admin rights? If the user access permissions are defined in the application data, can he re-install the application and gain full access that way? We’re running QB2012 Pro.

    Reply
    • Hi John,

      Geez, sorry to hear that. Because of the seriousness of your situation, I think you should get your local CPA and/or QuickBooks Pro Advisor to come out and help you ascertain your vulnerabilities and options. Thanks for your question.

      Reply
  18. Is there a way to restrict user from adding new chart of accounts and editing current ones? This is for QuickBooks Enterprise Solutions.

    Reply
    • Hi Helen,

      Yes, just find the role that best describes what the user will be doing, and check to make sure that for that role, their permissions for accounts does not have adding or changing checked. Thanks for your question.

      Reply
  19. Hi Shannon:

    Is there is any way to restrict user from online banking access while still giving them access to create/edit manual credit card transactions?

    Angela

    Reply
    • Hi Angela,

      In Enterprise, you can separate out the permissions for bank feeds from credit card charges. In Pro or Premier, you should be able to give no access to “Sensitive Accounting Activities” (which includes online banking) but give access to “Checking and Credit Cards”. Give that a try. Thanks for your question.

      Reply
  20. Hi
    Please I want to give my users access only to view and send memorized report via email. But due to the restrictions on the sales report they can’t access it.
    Please I need your help
    Your urgent response will be highly appreciated.
    Thank you

    Reply
  21. Hi,

    Is it possible to restrict users from seeing cost, vendor information and calculated average on item-information ?

    QB Enterprise Manufacturing/Wholesale 18 trial.

    Reply
  22. Is it possible to restrict a user from voiding a transaction? They are restricted from editing or deleting, but still able to void. We are using Premier.
    Thanks

    Reply
    • Hi Jaimi,

      That’s not what I’m seeing (in Desktop Accountant 2018). If a user does not have editing access, then QB will tell you that when you try to void a transactions, and you can’t void it…

      Reply
  23. Hi! I have QuickBooks Online, I need to restrict my salesman to edit inventory. As long as I know, I can’t do it in the Online version. May I do it in the Quickbooks desktop version? If so… Is there a way to export all my data to the desktop version?

    Reply
    • Hi Odibett,

      In Desktop Enterprise, you can restrict editing of inventory. In Premier or Pro, you can’t restrict inventory as much. You’d need to check with QB Online support about downloading a copy of your online data to a Desktop QB file. Thanks for your question.

      Reply
  24. Hi,
    I am using Quickbooks 2015 edition at the non profit company I work for. I’ve just started using the Doc center to attach receipts and statements. Is there a way to prevent a user from accidentally deleting the attached documents?

    Reply
    • Hi Linda,

      If a user has access to receipts or other A/R transactions, then he/she would be able to delete attached documents that are associated with those kinds of transactions. If the user doesn’t have access to those kinds of transactions, neither would they be able to delete attached documents to them. Thanks for your question.

      Reply
  25. Hello! QB’s 2015 Premier Edition User! My question is regarding user restrictions for reconciling and view of other employee payroll. Is there a way to restrict the employee access and still be able to reconcile our accounts?

    Reply
    • Hi Nay,

      Looks like if you have Sensitive Accounting Activities turned on (to be able to reconcile), you can also go into the Employee Center and see payroll info. even without Payroll access .

      Thanks for your question.

      Reply
  26. Hi Shannon. We are using Peachtree and we are not able to restrict information that are not valuable to our employees. Even if employee only has access to sales and A/R, they are able to VIEW our cost and vendor but cannot edit. This is reason why we want to switch to Quickbook Premier desktop version if we are able to restrict certain information.

    I want to make sure that if I set a user to sales and A/R, they are not able to see our cost and vendors from purchase and A/P section. Hope you can help.

    Reply
  27. Charlie,

    Depends on the edition of QB. For Enterprise, if a user only has access to A/R functions, they won’t be able to see A/P info or inventory cost info. But in Pro or Premier, they can still open the Vendor Center and see vendors, even without A/P permissions, and they can open the Inventory Center, pick an item, edit it, and see it’s cost. You might want to download a trial version and play around with it. Some of the permission implementations are not what you’d expect, as you can see from all these comments.

    Thanks for your question.

    Reply

Leave a reply

<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong> 

required