How to Set Up the Right Access (Without Losing Control of Your Books)
QuickBooks Online makes it easy to invite users—but not always easy to understand what they can actually see or change once they’re inside.
Let’s break down QBO user roles and permissions in plain English so you can confidently give access without risking your financial data.
QuickBooks User Roles and Permissions: Why User Roles Matter (More Than You Think)
User roles determine:
- What someone can see
- What they can edit
- Whether they can delete, export, or invite others
Too much access = risk
Too little access = bottlenecks
The goal is right-sized access based on responsibility.


The Main QuickBooks User Roles (Plain-English Version)
When you purchase an asset, you’ll typically need two accounts:
1️⃣ Primary Admin
Who this should be:
The business owner (or a very trusted financial decision-maker)
What they can do:
- Full access to everything
- Manage users and permissions
- Connect apps, payroll, bank feeds
- Transfer admin rights
Important note:
Only one Primary Admin exists per QBO file. Choose wisely.
2️⃣ Company Admin
Who this should be:
Bookkeepers, internal finance managers, or partners
What they can do:
- Almost everything the Primary Admin can
- Manage transactions, reports, and settings
- Add or remove users (but cannot transfer Primary Admin role)
Best practice:
Limit how many people hold this role. Fewer admins = fewer mistakes.
3️⃣ Standard User (Predefined Access)
This role comes with preset permissions, which makes it easier—but less flexible.
Common access levels include:
- Sales only (invoices, payments)
- Expenses only (bills, vendor payments)
- Both sales & expenses (no sensitive reports)
Good for:
Office managers, sales teams, AP/AR staff
4️⃣ Custom User (Where Things Get Powerful)
Custom roles let you fine-tune exactly what someone can do.
You can control access to:
- Banking
- Sales
- Expenses
- Reports
- Lists
- Payroll
- Sensitive financial data
Example:
A team member can:
- Enter bills
- BUT not pay them
- AND not see bank balances
This is ideal when you want control without micromanaging.
5️⃣ Accountant / Bookkeeper Access
This is a special role designed for professionals.
What makes this different:
- Access to accountant tools
- No user limit impact
- Cleaner collaboration (no shared logins)
Pro tip:
Always invite your bookkeeper using the Accountant role—not as a standard user.
Managing Users in QuickBooks Online: How to Decide Who Gets What (Real-World Examples)
| Role | Best For |
| Primary Admin | Business owner |
| Company Admin | Trusted bookkeeper or finance lead |
| Standard User | Staff handling daily transactions |
| Custom User | Team members with specific tasks |
| Accountant | External bookkeeper or tax professional |
Common Bookkeeping Mistakes to Avoid
🚫 Giving everyone Admin access
🚫 Sharing logins
🚫 Never reviewing permissions
🚫 Forgetting to remove ex-employees
🚫 Letting vendors “just take a look”
QuickBooks Online Best Practices for Long-Term Sanity
✔ Assign the least access necessary
✔ Review users quarterly or annually
✔ Update roles when someone’s job changes
✔ Remove access immediately when someone leaves
✔ Keep a short list of Admins
📍 Where to Find User Roles in QuickBooks Online
If you want to review or adjust who has access to your books, here’s where to go:
1️⃣ Log into QuickBooks Online
2️⃣ Click the ⚙️ Gear Icon in the upper right corner
3️⃣ Under the “Your Company” column, select Manage Users
From there, you can:
- View all current users
- See their assigned role
- Edit permissions
- Add a new user
- Remove access
Your business evolves—and your QBO user roles should evolve with it.
Taking 10 minutes to review permissions now can save hours of cleanup (and stress) later.
Not sure who should have access to what? I help clients clean up QBO permissions all the time—and I promise, it’s less scary than it sounds.
FAQs
How do you add a new user to QuickBooks Online?
Once you are logged into QuickBooks Online, you click the Gear Icon (upper right corner), go to the Your Company section, and select Manage Users.
What types of user roles are available in QuickBooks Online?
Primary Admin, Company Admin, Standard User, Custom User, and Accountant.
Can I customize user permissions in QuickBooks Online?
Yes, you can use custom roles, to fine-tune what someone can do. Like controlling access to banking, sales, expenses, reports, lists, payroll, and other sensitive financial data.
How many users can I add?
The number of users depends on the plan you have. You can invite your accountant and bookkeeper separately as an “accountant” and that doesn’t count toward your users. Simple Start allows you 1 user, Essentials allows up to 3 users, and the Plus version allows up to 5 users.
Can multiple users work in QuickBooks Online at the same time?
Yes! Because QuickBooks Online is cloud-based, multiple users can log in and work at the same time, as long as you stay within the user limit for your plan.
What is the difference between a primary admin and a company admin?
The Primary Admin is the main owner of the QuickBooks account and has the highest level of control. This person manages the subscription, billing, and can transfer the primary admin role to someone else. A Company Admin can manage most things inside the company file, such as adding users and changing settings, but cannot manage the subscription or transfer the primary admin role.
Can I change a user’s role after they are added?
Yes! Your roles and permissions can be changed at any time by the admin in the Manage Users section. This allows you to adjust what someone can see or do as responsibilities change.
Can I remove a user from QuickBooks Online?
Yes! You can remove a user at any time within the Manage Users section.
more2heather@gmail.com | (206) 227-6128

