Managing users, roles and permissions

Settings → Users & Permissions shows everyone who can open this company and what their role lets them do. It has three tabs: Users, Permissions and Access Requests. To add someone new, see Inviting team members.

Before you start

You need to be the Company Owner or an Admin. Other members see only themselves on Users, can't open the permission matrix, and don't get the Access Requests tab.

What each role can do

By default, each role gets these permissions in the accounting modules:

• Company Owner — full access, and the only role that can delete the company. There is one per company, and nobody else can change the owner's role or remove them.
• Admin — full access, including managing users, billing and activity logs.
• Accountant — can create, view and edit records, but not delete them.
• Staff — can create and view records, but not edit or delete them.
• Auditor and User — can view records only.

Check a role's permissions

1. Open the Permissions tab.
2. Pick a role from the role selector.

General & Accounting lists each module with All, Create, Read, Update and Delete ticks. AI Modules shows each AI feature, such as Smart Uploads and AI Auditor, as Enabled or Disabled. The matrix is for reference: you change what someone can do by changing their role.

Change a member's role

1. On the Users tab, find the person. Search by name or email, or filter by Role and Status.
2. Click the three-dot menu at the end of their row and choose Edit.
3. In Manage member, pick the new Role.
4. Click Save.

You can't change your own role or the Company Owner's.

Disable or remove a user

From the same three-dot menu:

• Disable — the person can no longer open this company but stays in the list with the status DISABLED. Choose Enable to give access back.
• Delete — opens Remove user from company. Click Yes, remove user. They lose access to this company only; their account and their access to other companies are not affected.
• Resend invite — shown while the status is INVITE SENT, to send the invitation email again.
• View — opens the person's details. You can also click the row.

You can't disable or remove yourself, and the Company Owner can't be removed.

Approve or decline access requests

People who matched your company's GSTIN when they signed up can ask to join. Their requests appear on the Access Requests tab.

1. Click Approve on the request.
2. Choose the Role they should join with.
3. Click Approve & add member. They are added straight away.

To turn someone away, click Decline, optionally add a Reason (optional), and click Decline request.

Tips

• Give the lowest role that covers the work. An Auditor can view your records without changing them.
• To download the user list, use the download button above the table and choose Download as CSV or Download as XLSX.

Related articles

• Inviting team members
• Reviewing activity logs