Manage access from Organization Settings > Users. For client workspaces, this page shows any linked accounting-firm access at the top, the organization member list below, and invite, role-change, and removal actions on each row.
Choose the right role
Assign the lowest role that lets someone do their job, and raise it only when they actually need more.
- Owner — full control, including billing, deletion, and ownership transfer
- Admin — manage settings, users, and firm access (Owner handles billing and deletion)
- Editor — works in the model; no workspace administration
- Viewer — read-only
- Firm Admin — the admin tier inside accounting-firm workspaces, for firm staff who manage client access
Role changes take effect immediately.
What each role can do
Permissions are cumulative: each role can do everything the role below it can, plus more. The two thresholds that matter most are Editor (can change the model) and Admin (can administer the workspace). Billing and destructive actions are Owner-only.
| Capability | Viewer | Editor | Admin | Owner |
|---|---|---|---|---|
| View reports, dashboards, and analysis | ✓ | ✓ | ✓ | ✓ |
| Edit the model — forecasts, schedules, drivers, imports, QuickBooks sync, cash planning, reports, KPIs | ✓ | ✓ | ✓ | |
| Edit entity settings — classification, special accounts | ✓ | ✓ | ✓ | |
| Manage organization settings, users, and firm access links | ✓ | ✓ | ||
| View the audit log | ✓ | ✓ | ||
| Billing — plan, payment method, entity capacity | ✓ | |||
| Delete an entity or the entire workspace | ✓ | |||
| Transfer ownership | ✓ |
Firm Admin sits alongside Admin inside accounting-firm workspaces: firm admins manage the firm's settings, users, and client-access links, while only the firm Owner can delete the firm workspace. When firm staff work inside a client's workspace through a firm link, they act with the Editor or Viewer access that the client granted — not with their firm role.
Invites and removal
+ Invite Member sends an invite by email. A pending invite stays on the list until the recipient accepts it or you remove it.
Removing a member revokes their access to this organization — it does not delete their user account.