User access - Administrators HQ access to client files
We are getting an increasing amount of (sometimes angry) pushback from clients where when we add Administrators to our HQ account, they are automatically given full permissions over any linked client Xero files, as well as all our ledger files. We are a large firm with over 15 Administrators.
Please give us the ability to CHOOSE, if we want to add all administrators to all files.
OR
Create an administrator role that doesnt need to add them as a USER to each client file.
Imagine you have a Xero file for your own personal business, and suddenly notice 13 people that you don't recognise have full access to your accounts.
Zoe Giles-Jones
shared this idea
Hi team, we understand and appreciate the concerns around permission sets and giving staff access to clients. The Xero Partner Hub will introduce new permissions with more granularity to control what your staff can see and access within client files. These permissions will be independent of the practice role and can be assigned to anyone.
The Admin role will continue to have automatic access to practice owned orgs, however you may like to consider whether existing staff still need this permission or if they can instead be given the Standard role with additional permissions for managing Clients or Staff. I'll return to share as this goes live. Thanks
-
David Derby, EA
commented
As a corollary -
I'd like to have my staff accountant automatically added when a client invites me to their organization. As it is, if a client unchecks "manage users" (because why would I be able to add or delete non-accountant users?), I can't add my accountant to work on the org, I have to ask for manage users permission. -
Daniel Beydoun
commented
Completely agree - need a seperate permission layer