User Role - Restrict access to specific Settings
Ability to customise user roles to restrict some access in Xero.
Purpose: Some staff should only have limited access in Xero.
Hi everyone, we appreciate all your feedback on how we could evolve roles for customers using Xero. As you can see through the ideas on the platform, there are a wide range of combinations of permissions our customers want to see us build. As user roles impact all areas of the product, there are many considerations we must factor in when assessing how to solve for majority of our customers needs.
We’re beginning to conduct research on the current landscape and how we might approach some of the most predominant needs in roles for our customers. Front footing this, the discovery of this work will be long winded and there will be multiple phases of research and forms of engagement with users that’ll help shape the path ahead in this space.
We’d like to invite you, our community to be part of this research and discovery. This may involve interviews and sharing further feedback through direct surveys or questionnaires.
✍️ If this is something you’d be interested in taking a part of please fill in our short form here.
Though we won’t be able to invite everyone into every stage, our research team will be in touch with many of you over the coming months.
We will be back to share on the outcomes of our research and any progress around development of roles in Xero.
-
Jackie Wright commented
To my horror, I have just "accidentally" discovered that all purchasing staff have access to see payments made all employees, via contacts. They don't even have to have a level of access as high as standard user, just access to purchases within the invoice level. I am horrified. As an absolute minimum this should be explained alongside the tick box in the permissions screen. In my mind, only users with access to payroll should have any way of seeing this incredibly sensitive, and what should be confidential, information. It is bad enough that the user roles are so unrefined, but having access to certain payroll information, hidden behind a "purchasing" façade is beyond belief. To clarify, I opened up a support case and a Xero representative has confirmed that this is, indeed, the case.
-
Aaron Brown commented
Agree on this - needs to be a lot more functionality put into Xero around this - in Sage you can drill right down to specific pages and tabs within a module for a user, rather than just having an overall category for a user role, it needs to be much more customizable.
-
Alison Gunn commented
I Would like to be able to give access to someone doing my invoicing the ability to update/edit products and services for invoicing without giving them access to bank accounts purchases etc
-
Elaine McKilligan commented
I would like to be able to give clients full access to create sales invoices, send statements etc but have read only access to everything else. This means they can deal with their invoicing but cannot interfere with anything else (where we do the book-keeping).