Enter your idea

So what level of access do you give auditors? I want them to be able to see just about everything, but not to edit or approve. I tried Viewer, but then they can't access payroll reports.

Customisable User Roles in Xero
I am writing to request the introduction of more customisable user roles within Xero. Currently, the Standard user role provides access to critical features like inventory and sales reports, but it also grants visibility into sensitive areas such as bank reconciliations, which do include employee details and their payroll transactions. This lack of granular control over permissions poses a challenge for businesses like ours, where team members need access to specific features without compromising sensitive data.
Having the ability to customise user roles would allow businesses to:
• Grant access to specific reports and features (e.g., inventory and sales) without exposing payroll or other sensitive financial data.
• Improve data security and confidentiality by restricting access to sensitive areas.
• Tailor user permissions to align with individual responsibilities, enhancing operational efficiency.
We believe this enhancement would benefit many businesses and align with Xero’s commitment to providing flexible and secure solutions for its users. Thank you for considering this request, and we look forward to seeing how Xero continues to evolve to meet the needs of its customers.
Kind regards,
Kylene Schlebusch

I am going down API rabbit holes just to pull the specific accounts and reports certain staff need access to. We are even in discussions with a freelancer to build the API agnostic that does what we want. I'm not sure why roles & permissions are so inflexible, but it definitely needs attention.

This is a necessity! We have some individuals set to "View Only" but they can't actually VIEW some of the reports.

Additionally... we need to have some sort of clerk role that will allow viewing of reports and the ability to invoice customers. Team members should be able to reconcile their own work and currently can't do that.

An important part of many businesses's is confidentiality. Although everyone is working in the same organisation it is important that each user has access to certain things within their own roles. Quickbooks has done a great job at this and I was shocked to see the little options xero offers.

Most important in my opinion is not allowing users to see everything.

The sales user allows someone to make invoices, view all contacts and receive payments. I want my salesman to only create invoices and not see any purchases, who we are Purchasing from and definitely not receive a payment.

A salesman can make an invoice in person, receive a customers payment in full and then go back to the invoice and edit it to remove items. This leaves an organisation extremely exposed to bad actors.

There should be an option to have a user only make invoices and or approve invoices without being able to receive payments and also the option of not seeing "Suppliers". In xero it auto sorts the contacts as customers and suppliers. its good but not good in this case.

We create invoices in XPM, but when we push them through to Xero, the staff with invoice only access to our practice can't see the invoices as they can only see invoices that they've raised themselves.

Critical for larger companies with more diverse internal user roles

I noted this when joining Xero in Oct 2018 - it was just a massive draw back compared to Pastel. The user access customizing under Pastel worked very well and was nice and flexible. I love Xero but this is definitely a negative

User roles need to be far more customizable than the currently available options. For example, a user should be able to approved purchase invoices without also having access to sales invoices and vice verse. Users should be able to access the files library without having access to the reconcile bank accounts. We are losing potential customers, because they choose inferior software that has more defined user permissions.

This is a basic need. Staff should be able to send invoices, purchase orders and set up new employees without seeing all bank accounts.
Very poor security and needs to be fixed asap

user roles - making the user roles more flexible

we wish to have more options to give our users the authority of just what we need without any extra unnecessary authority

i suggest to have a look at ZOHO BOOKS , it has a very various user roles

Xero - User roles.

User roles should be more customizable than the few options that Xero currently has available. For example, one might want to give an employee access to the bank reconciliation but not the ability to create invoices or credit notes- this is not currently possible.

Xero is available for less cost as a simple "Cashbook" and we find this perfect for running a syndicate account for part ownership (think holiday house, boat, camper van, small club, etc.)

We have a single manager / accounts person but want to offer a view only role to all members for complete transparency but only have one person able to do the actual reconciliation and make changes.

Currently there isn't a Read Only user role for the Partner Edition Cashbook plans and to allow the other members to see things, you must make these users a "Cashbook client" otherwise they cannot see reconciled transactions and view the attachments. The Cashbook client role allows the user to reconcile and edit statement lines which is not desirable.

We would like to see a simple "Read Only" user role provided like the full invoicing version of Xero.

This is imperative especially where segregation is needed within certain staff roles. A more granular user role approach is needed as a matter of urgency. At the moment it is an "all or nothing" user right but some users with invoice only roles might need to use one bank account as they only do Petty cash recons or need to print only an Accounts payable or purchases per GL code report. Please assist urgently.

please make it more flexiable

There needs to be more permissions available for access to reports. Some users need access to basic reports, but not all financials. There should be ability to run client invoice reports / AR & AP reports for some users, without giving them full access to banking, P&L / Balance Sheet. Seems like basic functionality to be able to select which reports they should be able to run etc.

I have a client that enters invoices but seems to mark them as paid completely aimlessly therefore this would be huge.. If there was just the ability to be a lot more granular with what people have access to in these lower levels of access that would be very helpful.

Hi guys, It's surprising that this hasn't been thought of already, I can see all the comments. But to have a user only have access per one bank account for reconciling.

My problem is I simply want the standard user to just access the one-button-feature of adding payment options to their invoice. (Surprised that this isn't a invoice-only option as it falls under invoicing..)

So in order to give them that feature, they need to go to standard, which then access all bank accounts. This is only plausible if they have access to just the 1 revenue account (where all income comes in from invoices.)

Surely such a feature should be prioritised?

Being able to assign users to raise purchase orders only would allow more flexibility.

Allow complete flexibility in setting user roles and permissions, rather than the limited pre-set roles.