QuickBooks HelpQuickBooksHelpIntuit

Create data level permissions in QuickBooks Desktop Enterprise

by Intuit• Updated a day ago

Learn how to set data level permissions in QuickBooks Desktop Enterprise Platinum, Diamond and Accountant 21.0.

In QuickBooks Desktop Enterprise, you can set different data level permissions for a users job role. This way, you can give access to only the areas of QuickBooks a user needs to do their job.

For example, you can give access to a sales rep in Texas so they can create invoices or email customers for their area’s customer group. You can create groups for vendors a user works with.  You can also create groups for employees. Here’s what to do.

How to create a restricted role

Before you get started, make sure you log in as the QuickBooks admin and you’ve created customer, employee, or vendor groups and custom user roles.

How to assign a restricted role to a user

Depending on the user roles assigned, the user will only be able to see and create transactions and entries for their customer or vendor group. They can also see reports based on their group.

Am I able to assign multiple roles to a user?

Yes, you can assign multiple roles to a user so they can access different areas of QuickBooks. If the roles have different access levels, for example one role can create invoices and the other can’t, the user will have access to the full permissions.

Can I open a company file with restricted access roles in a different version of QuickBooks Desktop Enterprise?

If you log in using the same user credentials, you’ll be able to access only restricted data for the role. If you’re an admin, you can only make changes to the user role in the most recent version of QuickBooks Desktop.

What happens if I change a role from restricted access to partial or full access in the customer/vendor center?

The role will no longer have restricted access, so the user will be able to view and modify records for their access level. All the data level permissions will be removed, but you can define the groups and add data level permissions again if you change your mind.

Do data level permissions also apply to third-party apps we have connected to QuickBooks Desktop? 

No, third-party apps and data will remain the same and depend on the permissions assigned to the user.

Can I edit a group that’s used to define the restricted access role?

Yes, only the admin can edit the group if it’s used to define a restricted role. If the group isn’t used for restricted access, any user with full access to the customer and vendor center can edit the group.

Can I delete a group that’s used to define the restricted access role?

An admin can delete the group if it’s not used for a restricted role. If the group is used for a restricted role, you can delete the group after it’s unlinked from the user role.

For groups using payment reminders or automated payments, you’re not able to delete the group.

QuickBooks Desktop Mac PlusQuickBooks Desktop Premier PlusQuickBooks Desktop Pro Plus