Skip to content

Accountant has full rights in our admin, that feels too broad.

An accountant typically only needs read and comment rights, plus the option to propose journal entries. Full admin is overkill for most situations.

Try this first

  1. 1Create a separate role 'accountant' in the package with read-only on ledger, bank, AR/AP and reports.
  2. 2Allow journal-entry proposals but let bookings go live only after approval by someone on your side.
  3. 3Remove full admin rights from the accounting firm and ask them which users need to stay active.
  4. 4Document who at the firm has access (people change) and review every six months.
  5. 5Enforce 2FA on all accountant accounts, in our experience the weakest link.

When to bring us in

For a rights audit on your bookkeeping access, we can set up the matrix and finalise with your firm.

See also

None of the above fits?

Describe your situation below. We pass your input plus the steps you already saw to our AI and return tailored next-step advice. If it's too risky to DIY, we'll say so.

Who are you?

For the AI question we need your email and company, so we can follow up if the AI gets stuck, and to prevent abuse.

Limited to 2 questions per hour and 5 per day, kept lean so the AI stays useful. For more, contacting us directly works better for you and us.

Or skip the DIY entirely

Our Managed IT clients do not look these things up. One point of contact, a fixed monthly price, resolved within working hours.