cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
NEW Connect to DBS IDEAL direct bank feeds Click here
justine-camilleri
Level 1

Restricting access for API calls for specific user

Hi,

We would like to set up a user that has restricted access to the APIs. We have tried setting up a user with Standard access with limited permissions. However, when using this user's API access token, we were still able to query all the API data, even the ones that this user should not have had access to.

As an example, we set this user to not have access to Journal entries, however, calling the API "https://sandbox-quickbooks.api.intuit.com/v3/company/{companyId}/query?minorversion=65" with query "select * from journalentry startposition 1 maxresults 5" still returned results for this user, when the expected outcome should have been that the user does not have access.

Can you please advise on how this can be achieved? Does this have something to do with the way the company and the app should be set up maybe?

 

Thanks,

Justine

7 Comments 7
Mark_R
QuickBooks Team

Restricting access for API calls for specific user

Welcome to the QuickBooks Community, Justine.

 

Let's get you to the right support team who handles API concerns.

 

With regards to restricting access to API calls, I recommend seeking help from our other Intuit forum called the Intuit Developer Forum. It's a place where you can ask for help with integration and programming and get help from a number of programmers, developers, and experienced users like you.

 

Just in case you want to learn more about managing users within QuickBooks Online (QBO), you can check out this article for more guidance: User roles and access rights in QuickBooks Online.

 

Feel free to leave a comment below if you have other concerns or follow-up questions about this. I'm always here to help.

justine-camilleri
Level 1

Restricting access for API calls for specific user

Hi Mark,

 

Thank you very much for your reply. Thanks for the link provided, I will post my question regarding the APIs there.

 

I have just one follow up question that maybe you can help with. Can you please explain how linking works between companies, apps and users? As we have set up some test companies and added specific users to these companies, however, in the Switch Company option we do not see all the companies listed that this user is linked to

 

Thanks,

Justine

RCV
QuickBooks Team
QuickBooks Team

Restricting access for API calls for specific user

Thanks for coming back, Justine.

 

The option to see all the companies listed that this user is linked to is unavailable in QuickBooks Online (QBO). However, we can use the Audit Log feature since it records all account activity such as user sign-ins, changes to QuickBooks settings, edits to customers, suppliers, employees, and payroll submissions. QuickBooks records the following in the audit log:

 

  • The date of any change to your books
  • The name of the user who made the change
  • The type of change or event
  • The name of any customer or supplier related to the change
  • Any original transaction date and amount

 

Events recorded in the audit log are available for two years. Sign-outs are only recorded in the audit log when you select Sign out. This will not record if you close your browser, go to another website, or when QuickBooks signs you out automatically due to inactivity.

 

When it comes to linking between companies and apps, third-party applications integrated with our program are available in the App Store within QuickBooks. We can go to the Apps menu and find apps from there. Here's how:

 

  1. Go to the Apps menu.
  2. In the search bar, type the name of the app.
  3. Click the program that you want to integrate.
  4. Click Get app now.

 

Also, you can check this link for app collections reviews in QuickBooks: https://apps.intuit.com/app/apps/home. You can visit these articles to remove and integrate third-party apps in QBO:

 

 

If you have further concerns with any QuickBooks-related matters, please leave a comment to post them here. I'll be here to help. 

justine-camilleri
Level 1

Restricting access for API calls for specific user

Hi Mark,

 

Thanks for your reply. Regarding the viewing the list of companies linked to a user, it seems that in our case it's because they are on different products. When I go to the 'Manage your Intuit Account' I am able to see all companies from the different products under 'Products & Billing', however, if I try to switch product it doesn't work.

 

Thanks for the details regarding the Apps.

 

Thanks,

Justine

AileneA
QuickBooks Team

Restricting access for API calls for specific user

Hello, justine. 

 

The possible reason why you are unable to find your account when trying to switch to another account in QuickBooks Online could be that you're using incorrect login credentials. Let's double-check that you're using the correct username and password for your QuickBooks Online account to ensure this isn't the case. 

 

We can also open your account using a private or incognito browser. This will help us figure out if the issue is related to your browser issue. 

 

You can refer to these shortcut keys to open an incognito window in all supported browsers:

 

  • Chrome: Ctrl + Shift + N
  • Firefox: Ctrl + Shift + P
  • Safari: Command + Shift + N

 

If it works, switch back to your regular browser. Then, clear your browser cache. Sometimes, stored data in your browser's cache can cause issues accessing certain websites or accounts. Clearing your browser cache can help resolve this problem. You can usually find this option in your browser's settings or preferences. 

 

Another is to access your QuickBooks Online using a different browser or device. This can help determine if the problem is specific to your current browser or device. 

 

If the same thing happens, I recommend contacting our Customer Care Support team. They have the tools to check it further. 

 

I've included the steps to contact support below. 

 

  1. Click the (?) Help icon in the upper right-hand corner of the Dashboard.
  2. Select Talk to a Human.
  3. Enter a short description of your concern and press Enter.
  4. Hit I still need a human.
  5. Choose Contact Us to connect with our live support.

 

These instructions are also available from our guide: Contact QuickBooks Online support. 

 

If you want to customize QBO the way you want it to. You'll just have to modify some preferences on the Account and Settings page to achieve this. For more details, please check out this resource: Edit company settings.

 

Feel free to tag my name if you need more help. I'll get back to you as quickly as I can. Take care always.

justine-camilleri
Level 1

Restricting access for API calls for specific user

Hi Mark,

 

Thank you very much for the detailed explanation. This answers my query.

 

Thanks and regards,

 

Justine

GlinetteC
Moderator

Restricting access for API calls for specific user

You're most welcome, justine.

 

I'm happy that my colleague was able to assist you in achieving your goal. Rest assured that we will continue to give the best customer service you ever experienced.

 

Let us know if you have other concerns in the comments below. We're always here to assist.