Permissions - User Roles to Submit and Approve Quotes and Purchase Orders
It is really basic, the permission control is not flexible and give more options. How about to give multiple choosing box for permissions. I want to create a user and give him permission to create and print quotations and a purchase order permission to create and submit for approval. Because the purchase approval permission i want to give to the manager levels only.
Hi everyone, thanks for sharing your feedback on this idea. We appreciate you explaining how important more flexible user permissions are for your businesses. We understand having granular control over who can create, submit, and approve quotes and purchase orders could help many of you implement better internal controls and protect sensitive financial information.
This idea is now moving to In Discovery, which means our product team are reviewing the viability of the idea as part of wider development of the permissions/user role functionality in Xero. We'll keep you updated here as we learn more.
-
Maxine Bright
commented
We need to be able to set user permissions so that only managers can authorise purchase orders to be paid, in the very least we need to be able to set the system so that the same person that raises a purchase order cannot be the same person that authorises it. Also it would be useful to be able set different levels of authority, so managers of a department can only authorise purchase orders under $500 but executive managers can authorise purchase orders of more than $500 etc.
-
Jill Hartmann
commented
It would help immensely to be able to have our estimator to view the quotes that send and approve.
-
Amelia Kennedy
commented
Having the ability for a user to create both invoices and bills but choose whether they can approve neither/either/both is fundamental. Please add to roadmap asap!
-
Damian Haremza
commented
Do we have an update on this? We require this in our business to allow for employees to do quotes without being able to see invoice, payroll and other business critical information.
-
Matthew James Mifsud
commented
The user role to just be able to issue/send quotations without access to anything else
-
Matthew James Mifsud
commented
This is an essential feature
the ability to just be able to issue/send quotations without access to anything else
-
Michelle Mortlock
commented
Xero please provide an update as to when flexibility on this will be in the roadmap
-
Alan Oversmith
commented
Frankly, I can't get my mind around how accounting software designed for multiple users would be developed without this basic function. An update here should be a priority.
-
Nicki Oversmith
commented
This function is absolutely necessary to protect vital financial information and maintain proper internal control.
-
Deb Wingerter
commented
For internal control purposes, this is so important. Is there any update on this?
-
Pam Nelson
commented
Absolutely agree with Steve Ziara on this! Can we please get an update?
-
Steve Ziara
commented
Having User Access Roles is extremely important! Not everyone in an organization should have full access to all financial information.
-
Lorraine Adams
commented
Xero - Isn't it pretty obvious? Anything would be better than access to pretty much EVERYTHING, as things have stood since Xero was invented.
Sorry to be rude, but you do understand accounting right? & GDPR yeah?
Let me help - Purchase ledger clerk needs access to supplier contacts, bill processing, supplier reports, aged creditor reports, bills reports, purchase day book reports, bill production, quotes, purchase orders, bank supplier payments, refunds, credit notes and .........
Purchase ledger clerk DOESN'T NEED and NOR SHOULD SHOULD HAVE ACCESS to staff pay & personal information, the director's dividends & tax information, the companies balance sheet, staff bonuses, HMRC arrears (or otherwise), investments, how much the company spent on the last client event, or the christmas party, or the computers, Joe's redundancy payment (oh, did I let the cat out of the bag or should I call it something else in Xero so no one knows, HMRC won't mind....)..........do you really need me to go on?......
Perhaps some one else could be kind enough to waste some of their time explaining what the sales ledger clerk needs. or what the treasurer or in house accountant needs - which surprisingly is where the 'access all areas' should sit.
A waterfall access level approach with a tickbox list (just like staff access in MY XERO - (miss that - it was good and clear)....I've seen this before, oh yes, in SAGE. Works a treat. Easy. Clear. Transparent.
I have to give some staff access to EVERYTHING and freeze out others which not only causes causes offence, but also inconvenience to those that have to be disrupted in their own work to provide reports to other staff.
If the current reporting structure/platform can't be changed, why not build a suite of smaller reporting modules - task or job role specific??
It's stunning that this FLOOR exists in the first place, and beyond belief that in more than 10 years, and despite GDPR, and many many requests in the old & new voting system, NOTHING, EVER, has changed in this regard, or other items I've voted for..... -
Neil Bouwer
commented
The very basic user limitation limits the ability to implement appropriate internal controls.
It would be great to be able to set users with specific access, read, write, draft, approve, edit permissions for specific tasks in Xero.
Read, Draft, Write, Edit, Approve Invoices
Edit, approve Invoice payments
Read, Draft, Write, Edit, Approve Quotes
Read, Draft, Write, Edit, Approve Purchase orders
Read, Draft, Write, Edit, Approve Bills
Edit, approve Invoice bill payments
Read, Draft, Write, Edit, Approve Manual Journals
Read Specific reports
View, Edit, approve Bank transactions/PostingThis should be implemented in the same way Practice manager and WFM handles user access.
-
Steve Ziara
commented
Absolutely necessary. Can't move forward without this feature.
-
Pam Nelson
commented
a. A user should be able to build customer batch deposits that include an overpayment and/or refund without having access to see the Bank accounts (balances)
b. The ability to enter bills, but not execute payment on those bills. Enter checks, but not execute payment on those checks and not be able to actually print checks.
c. Ability to restrict visibility to account balances and ability to update vendor information with this role, above, as well.
d. The ability to limit user access to only certain bank accounts (would be nice to choose user access by bank account) -
Jenna VanderMost
commented
I agree! It would be nice to have different levels or to be able to check off various permissions. I would be more apt to pay for more users if this was a possibility. Right now I am looking to be able to have a user only be able to add/update contact info, but that's not offered right now.
-
Greg Knowles
commented
As a small business, this would be extremely beneficial to us, so that our business development manager can prepare quotes, but not have access to all the other invoicing and banking details. A tick box option to manage user access to components would be the BEST outcome for many businesses, I'm sure. We would greatly appreciate Xero fast-tracking this option.
-
Laura Low
commented
This is an option I am hoping will come through soon for a new employee.
-
Gina Chapman
commented
Agreed - user roles can be very granular - this blanket approach is extremely problematic. It should be a tick box function at a far more granular level.