QuickBooks permissions let you permit — or restrict — your users’ activities in QuickBooks. If you have more than a couple of employees’ who use QuickBooks, you probably take advantage of this feature.

When I posted “How to Restrict User Access in QuickBooks” a few years ago, it elicited scores of questions and comments. My thanks go out to all those commenters. Here’s a summary of those comments and answers:

What is possible to restrict in QuickBooks (partial list):

You can restrict…

  • Access by module (Sales, Payroll, etc.)
  • Reporting
  • Ability to change or delete existing transactions
  • Access to especially sensitive information like bank accounts, customer credit cards
  • Access to financial reports

What is impossible to restrict in QuickBooks (any edition):

You cannot restrict…

  • Name-based access (e.g. you can’t allow transaction entry or reporting for some customers / jobs / employees / vendors / sales reps, while restricting others)
  • Changing other users’ entries, but allowing you to change your own entries
  • Access to only selected reports (as opposed to whole categories of reports)
  • Access based on payroll group, weekly vs. bi-weekly, for example
  • Date-based access (e.g. running reports or viewing transactions only data before or after a certain date)
  • Account-type access (e.g. able to view P&L accounts but not BS accounts)
  • Viewing of the item list
  • Access to bank accounts without access to paychecks
  • Field-level access, e.g. disallowing a sales rep from changing the sales rep field, or disallowing access to inventory cost while retaining access to QOH
  • Allowing the entry or reconciliation of some bank accounts or credit cards, but not others
  • Entering a transaction without being able to see the previous entries also

There are many examples of restrictions that are possible in Enterprise edition but not in Pro or Premier editions. Here are a few differences that came out of the comments.

What is possible to restrict in Enterprise, but impossible to restrict in Pro or Premier:

  • Preventing the viewing the Employee Center’s list of employees
  • Allowing access to estimates without also giving access to other sales/receivables functions
  • Allowing access to payments without also giving access to invoicing
  • Allowing creation of purchase orders but no other A/P entries
  • Creating classes
  • View-only mode for non-financial reports, without also giving the ability to enter transactions (e.g. you can’t keep access to A/R reports without also giving access to A/R transactions)

Which of the “impossibilities” listed above do you think Intuit should definitely address in a future version?

132 thoughts on “User Permissions: What Is Possible, Impossible to Restrict

  1. I have all the permissions the administrator can give me. I can print bill payment vouchers for check payments, but not for vendors paid by credit card. Any ideas? Thanks.

  2. QuickBooks Enterprise version comes with flexibility to define user access. You can assign view only access with print access however in Pro and Premier you can either assign create access or no access. Full access/Partial access or no access.

  3. My assistant was able to create and memorize an A/P report. But she could not go back into that same A/P report. It said she needs “Sensitive Financial Reporting” permission. I do not want her to have that full permission because with it she could see the bank accounts and P&L etc. I feel she should be able to create, memorize, access, update and print everything to do with A/P. Is there a way for my assistant to do this that I am not aware of? Does the 2016 version allow this? Thanks for any help you can give.

    • Lorri,

      The discussion above is only for the desktop editions of QuickBooks. I don’t have a listing of what permissions can be allowed/disallowed for QuickBooks Online. Thanks for the question.

    • Reshma,

      In Enterprise, there is an access control specifically for Purchase Orders. So you should be able to turn off access to all other A/P functions except for that. This level of restriction is not possible in Pro or Premier. Thanks for your question.

  4. @Tucker I am using QB PoS and I operate a salon where I have defined the stylists as customers (but they login as users and post to customer ‘on Account’ in QB) so that at end of day they give the team leader their daily collections. The team leader thereafter reconciles the ‘On Account’ balances with the cash received from each customer/stylist/user.
    The system restrictions however are not sufficient enough to prevent:
    1) a user/stylist from clicking the ‘Cash’ button and entering a cash sale yet it needs to be validated by the team leader first.
    2) a user from mapping/selecting any customers of their choice
    Is there a way to restrict this.

  5. Shannon,

    I’m having an issue with allowing specific users access to add/edit classes. Can you help with this? I don’t see an area in user permissions that would indicate the ability to add/edit classes.

    thanks in advance,
    Marcus Mire

    • Hi Marcus,

      If you are using Enterprise, you can modify a role to allow/disallow adding or editing the class list. If you are using an edition other than Enterprise, that’s not possible. Thanks for your question.

    • Hello Tahir,

      Yes, you can change the user’s permissions to not have access to Sales and Accounts Receivable. If you are using Enterprise, you can restrict it more closely to allow for transaction entry but not customer creating. Thanks for your question.

  6. Is there a way to grant access to create accounts but not access to view financial reports. I’m using the QuickBooks Enterprise Solutions Pro Services Edition. Thanks

  7. We have a couple of different bank accounts that we use to issue checks. Is it possible to restrict a user’s access to only be able to access one of the accounts? For example, I would like to have the user access checking account A, but not checking account B or C.

  8. Is there a version that will allow permission to ONLY view customer balances and transactions, but not to enter or change existing transactions?

    • Hi Jenny,

      In Enterprise, you can enable ‘view’ but disable ‘create’, ‘modify’, and ‘delete’ for A/R transactions. That is not possible in Pro or Premier. Thanks for your question.

  9. In Enterprise, is there a way to limit access by class? For example, allowing a receivables clerk to only see the customers and receivables information for the class that she uses?

  10. Hi John,
    WE are new to QB 2017 🙂 it has been a long time coming. But Finally we are here. I have set permissions up and people can still see payroll options and employee information. Have I done something wrong?

    • I would like to see an answer to this as well. I am having a problem with another employee who is looking at my time sheet and has changed one of my comments

  11. Hi Shannon. I’m using QB Premier. I want my office staff to be able to enter sales orders. That “open sales orders” report is what they use for production (we are a manufacturing facility). But I have to give the user “sensitive financial reports” access. I just want them to be able to run that report without being able to see the banking info and financial documents. Any idea how I can accomplish this?

  12. I have permissions set in Enterprise giving a user access to one bank account; however, if you go to Write Checks, you can change the bank account at the top and the user can now scroll back through checks written in a different bank account. Is there a way to allow users access to write checks from the one account, yet still preventing them from seeing checks written in other accounts?

  13. Is there any way to restrict someone from adding/deleting/changing transactions, but still be able to create and view reports and to see transactions without making changes to them? My boss wants a copy of QB put on his computer, but he doesn’t know how to use it. I want to be sure he doesn’t inadvertently change or enter something in the program. He just wants to be able to run reports. Is this possible?

    • Hi Sharon,

      If you are using Enterprise, then yes, you can restrict like that. But I’m guessing you’re using Pro or Premier, and you can’t directly restrict like that, sorry. Thanks for your question.

        • Hi Marsha,

          Yes, so what you do is edit each role that your users use. Click around and give Partial access instead of Full access, and don’t check the Delete box. That will lock your users out of being able to delete what you don’t want them to delete. Thanks for your question.

  14. Hi Sharon,
    We are using Enterprise and need to restrict all access to only one of our bank accounts. Is that possible? Thanks for your help!

  15. I have a human resource issue I think, but not getting any help from the owner of the company. One of the employees does not like me, and she is looking at my time sheets, and has emailed the entire office about my hours being billable versus non billable. And last week, she actually changed one of my notes and put in an obnoxious comment. Why are other employees allowed to see my time sheet, let alone be able to change anything on it? I am very concerned. I am not staying with the company, but I want to know how this can be prevented in the future.

    • Hi Mel,

      Dang, that’s awful. Sorry to hear that. You didn’t say whether she is the QuickBooks admin, or what kind of user permissions she has been assigned in QuickBooks. Sounds like she has payroll privileges and is using them to your detriment. You could ask the admin to remove payroll privileges for her user account. Thanks for your question.

  16. Is it possible in Enterprise to set up users so that they can’t see pop up reminders? We don’t want most users to see a payable reminders that pop up. Thank you.

    • Hi Ellen,

      If someone didn’t have Payables access in their user permissions, would it pop up payables reminders? If you click Edit / Preferences / Reminders, you can turn off reminders for different A/P situations on a company-wide level. You can’t specify it user-by-user though. Thanks for your question.

  17. We recently suspected a problem with an employee falsifying records in QB. We immediately restricted the employee’s access to QB pending further investigation. The employee has now stolen the computers containing the QB application, company file and backups. What we need to know is where are the user access restrictions recorded? Can he restore a QB backup prior to the imposition of access restrictions and regain his admin rights? If the user access permissions are defined in the application data, can he re-install the application and gain full access that way? We’re running QB2012 Pro.

    • Hi John,

      Geez, sorry to hear that. Because of the seriousness of your situation, I think you should get your local CPA and/or QuickBooks Pro Advisor to come out and help you ascertain your vulnerabilities and options. Thanks for your question.

  18. Is there a way to restrict user from adding new chart of accounts and editing current ones? This is for QuickBooks Enterprise Solutions.

    • Hi Helen,

      Yes, just find the role that best describes what the user will be doing, and check to make sure that for that role, their permissions for accounts does not have adding or changing checked. Thanks for your question.

  19. Hi Shannon:

    Is there is any way to restrict user from online banking access while still giving them access to create/edit manual credit card transactions?


    • Hi Angela,

      In Enterprise, you can separate out the permissions for bank feeds from credit card charges. In Pro or Premier, you should be able to give no access to “Sensitive Accounting Activities” (which includes online banking) but give access to “Checking and Credit Cards”. Give that a try. Thanks for your question.

  20. Hi
    Please I want to give my users access only to view and send memorized report via email. But due to the restrictions on the sales report they can’t access it.
    Please I need your help
    Your urgent response will be highly appreciated.
    Thank you

  21. Hi,

    Is it possible to restrict users from seeing cost, vendor information and calculated average on item-information ?

    QB Enterprise Manufacturing/Wholesale 18 trial.

  22. Is it possible to restrict a user from voiding a transaction? They are restricted from editing or deleting, but still able to void. We are using Premier.

    • Hi Jaimi,

      That’s not what I’m seeing (in Desktop Accountant 2018). If a user does not have editing access, then QB will tell you that when you try to void a transactions, and you can’t void it…

  23. Hi! I have QuickBooks Online, I need to restrict my salesman to edit inventory. As long as I know, I can’t do it in the Online version. May I do it in the Quickbooks desktop version? If so… Is there a way to export all my data to the desktop version?

    • Hi Odibett,

      In Desktop Enterprise, you can restrict editing of inventory. In Premier or Pro, you can’t restrict inventory as much. You’d need to check with QB Online support about downloading a copy of your online data to a Desktop QB file. Thanks for your question.

  24. Hi,
    I am using Quickbooks 2015 edition at the non profit company I work for. I’ve just started using the Doc center to attach receipts and statements. Is there a way to prevent a user from accidentally deleting the attached documents?

    • Hi Linda,

      If a user has access to receipts or other A/R transactions, then he/she would be able to delete attached documents that are associated with those kinds of transactions. If the user doesn’t have access to those kinds of transactions, neither would they be able to delete attached documents to them. Thanks for your question.

  25. Hello! QB’s 2015 Premier Edition User! My question is regarding user restrictions for reconciling and view of other employee payroll. Is there a way to restrict the employee access and still be able to reconcile our accounts?

    • Hi Nay,

      Looks like if you have Sensitive Accounting Activities turned on (to be able to reconcile), you can also go into the Employee Center and see payroll info. even without Payroll access .

      Thanks for your question.

  26. Hi Shannon. We are using Peachtree and we are not able to restrict information that are not valuable to our employees. Even if employee only has access to sales and A/R, they are able to VIEW our cost and vendor but cannot edit. This is reason why we want to switch to Quickbook Premier desktop version if we are able to restrict certain information.

    I want to make sure that if I set a user to sales and A/R, they are not able to see our cost and vendors from purchase and A/P section. Hope you can help.

  27. Charlie,

    Depends on the edition of QB. For Enterprise, if a user only has access to A/R functions, they won’t be able to see A/P info or inventory cost info. But in Pro or Premier, they can still open the Vendor Center and see vendors, even without A/P permissions, and they can open the Inventory Center, pick an item, edit it, and see it’s cost. You might want to download a trial version and play around with it. Some of the permission implementations are not what you’d expect, as you can see from all these comments.

    Thanks for your question.

  28. We need to give someone access to view data and reports but without the power to make entries or change anything — because they are a check signer and cannot have ability to make changes to QB

  29. I am using QB Enterprise and have full access to the company account. However, when I try to use income tracker or bill tracker it tells me I do not have that permission. It is selected in my user role but when I log in the permission doesn’t seem to be there.

  30. I have an employee whose only function in QB Pro 2016 is to do the Bank Reconciliations. What access does she need? Is there a way to limit what she can can see?

    • Hi Leah,

      She would need access to “Sensitive Accounting Activities”. If you don’t grant access to anything else, that will restrict her view of other things as much as you can in Pro. Thanks for your question.

  31. Using QB Enterprise 2017. Most of the users permissions have been assigned using the predefined roles and it is working fine.
    Starting in a week’s time we wish to restrict ALL but one user from adding items . Once the item has been added the, users who have their appropriate roles should not be able to change any field in the item list. They can change the prices when creating a PO, SO, Invoice or Sales Receipt.
    We will appreciate your input. Thank you.

  32. Are user permissions applied on a most restrictive basis or a most permissive basis ?
    – for example. A user may have been assigned two roles – (1) an AP role (which has full access to the item list) and (2) Sales or Accountant role (which has view only access to the item list)
    – can the user edit the list with the most permissive permissions on the item list (derived from the AP Role) ? or
    – can the user NOT edit the item list as a result of restrictive permissions on the same item list (derived from the Sales or Accountant role) ?
    This may answer the earlier question I had posted.
    Thank you.

  33. I want to allow a user to create sales receipts without being able to access accounts receivables information and view the balance.

  34. Using QB online and my client wants to give me permissions to use online billpay through QB online…any suggestions on the steps for permissions?

    • Hi Marilyn,

      If you have Enterprise edition, you can block out all access to customer information. If you have Pro or Premier, you can’t prevent users from seeing the Customer Center, unfortunately. Thanks for your question.

  35. Hi,
    I need an employee to be able to enter in transaction receipts in credit cards under the chart of accounts, I do not want her to reconcile or see balances.
    I do not want her to be able to see bank account balances or be able to run financial reports.
    I need her to also be able to create job estimates under customer names.
    I need her to also be able enter in payroll hours onto payroll checks under employees and payroll.
    Is this all possible? I use QB Pro 2016

  36. I have a client using 2015 Enterprise and they use NCR’s CounterPoint Retai software to interface their POS data. Their owner recently restricted their user to non-admin rights in QB’s. Now, she can’t interface into QB’s from CounterPoint unless QB’s is closed.
    Is there a way to restrict this user from P&L , Bank info, yet still be able to have these “rights” to interface into QB’s other than making her an Admin again?

  37. Is there a way to restrict payroll access to a class of employee in QB Pro 2017? i.e. I don’t want our payroll clerk being able to see corporate officer compensations.

    • Hi Ann,

      If you are using Enterprise, you can disallow all access to the Vendor Center, and vendor reports. Otherwise, I think users will still be able to at least open the Vendor Center. Thanks for your question.

  38. Hi.

    Can someone assist me with the way to hide Inventory Quantities in Quick Books Enterprise 2016 for a Sales Role.


Leave a reply

<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong> 


This site uses Akismet to reduce spam. Learn how your comment data is processed.