# How to Set Up Users, Roles and Permissions in QuickBooks Desktop Enterprise

> Add users, assign predefined or custom roles, limit roles to customer or vendor groups, review permissions, and change the admin in QuickBooks Enterprise.

- URL: https://logistify.ai/guides/quickbooks-desktop/users-roles-permissions-enterprise/
- Section: QuickBooks Desktop Guides, Setup, users & reports
- Applies to: QuickBooks Desktop Enterprise
- Steps checked against: Intuit's QuickBooks Desktop help articles, updated August and September 2026
- Updated: 2026-10-20

**Short answer:** To set up users, roles and permissions in QuickBooks Desktop Enterprise, sign in as the admin and go to Company > Users > Set Up Users and Roles. On the Role List tab, edit one of the 14 predefined roles or create your own, setting each area to None, Full or Partial. On the User List tab, add users and assign roles. Platinum, Diamond and Accountant can also limit a role to customer or vendor groups.

## Before you start

- Sign in to the company file as the admin. Intuit says only admins can create and manage users.
- List the jobs people do, such as order entry, receiving, purchasing and receivables. We suggest matching each role to a job, which keeps roles easier to manage.
- A change to a role applies to every user who has it. To change one person only, Intuit says to duplicate the role, assign the copy, and edit the copy.
- For data-level permissions, create the customer, vendor or employee groups first.
- This guide is for Enterprise. For Pro and Premier, Intuit's steps set access for each user under Company > Set Up Users and Passwords > Set Up Users.

Setting up a login for an integration or AI tool? See how to [give an integration read-only access in QuickBooks Desktop](https://logistify.ai/guides/quickbooks-desktop/give-integration-read-only-access-quickbooks-desktop/). To review what users change, see how to [track changes with the audit trail](https://logistify.ai/guides/quickbooks-desktop/audit-trail/).

## Step 1: Review the predefined roles

1. Go to Company > Users > Set Up Users and Roles and enter the admin password.
2. Open the Role List tab.
3. Select a role, then Edit, to review its permissions.
4. In Area and Activities, pick an area and set None, Full or Partial.
5. Select OK to save.

Intuit says Enterprise has 14 predefined roles covering common jobs. Roles marked with an asterisk can view every transaction in the file. Editing a predefined role lets you start from existing permissions, but any change applies to everyone who has it.

## Step 2: Create a custom role

1. On the Role List tab, select New.
2. Give the role a name that shows its permission level, as Intuit suggests, and add a description.
3. In Area and Activities, go through each area and set None, Full or Partial.
4. Select OK to save the role.

### How areas, activities and access levels work

- An area is a group of related tasks, such as Accounting, Banking, Customers & Receivables, Lists or Reports.
- Activities are tasks inside an area. In Banking, they include Checks, Credit Card Charges and Reconcile.
- Full allows view, create, modify, delete and print. Partial is a mix of those. None blocks the area or activity.
- Other levels include View Balance, for balances in the Chart of Accounts and the Customer and Vendor Centers, and View Payroll Info.
- Areas and activities marked with two asterisks give unrestricted access unless you change their level. Intuit says unrestricted access lets a user see payroll transactions in reports and searches, even without payroll permission.

## Step 3: Add users and assign roles

1. On the User List tab, select New.
2. Enter a user name and a password. Intuit lists the password as optional; we suggest always setting one.
3. Under Available Roles, select a role, then Add. Repeat for any other roles.
4. Select OK.

A user can have more than one role. Where the roles differ, Intuit says the user gets the fuller permission. So if only one of the roles allows creating invoices, the user can create invoices. To change a user later, highlight them and select Edit User. To see a summary of what one user can reach, select View User.

## Step 4: Limit a role to certain customers or vendors

Data-level permissions limit a role to records in groups you choose. Intuit's example is a sales rep who works only with the customer group for their region. Its article covers Enterprise Platinum, Diamond and Accountant 21.0.

### First, create the groups

1. Go to Lists > Manage groups.
2. Select Create customer group, add a Name and Description, then select Next.
3. Set the Fields, Operator and Values that define the group, then select Add and Next. Or leave them blank to add customers by hand.
4. Review the customers in the group. To stop QuickBooks adding and removing customers on its own, clear Automatically add or remove based on fields selected in this group.
5. Select Finish.

Intuit says customer groups need Enterprise 2021 or newer, which can also create vendor groups. The admin and anyone with full permission to the Customer Center can create customer groups.

### Then restrict the role

1. Go to Company > Users > Set Up Users and Roles.
2. On the Role List tab, select New, or select a role and Edit.
3. In Area and Activities, open Centers and choose Customer Center or Vendor Center.
4. Select Custom, then Define.
5. Choose the customer, vendor or employee groups the role may work with.
6. Set the view, modify, delete, print and view balance levels you need, then select OK.
7. Assign the role to users on the User List tab.

Users with a restricted role see and create transactions only for their groups, and their reports follow the same groups. The permission to create new records stays global for the role.

- Data-level permissions don't apply to third-party apps. An app depends on the permissions of the user it works as.
- Setting the Customer or Vendor Center back to Partial or Full removes the restriction and its data-level permissions.
- Only the admin can edit a group that a restricted role uses. To delete it, unlink it from the role first.
- In another Enterprise version, the same login still sees only restricted data. The admin can change restricted roles only in the most recent version.

## Step 5: Review who can do what

1. Go to Company > Users > Set Up Users and Roles and enter the admin password.
2. On the Role List tab, select View Permissions.
3. Choose the roles to review, then select Display.

That runs the Permission Access by Roles report, which shows what each role allows in one place.

## Change the admin

QuickBooks Desktop has more than one kind of admin, and Intuit handles each one differently:

- The Admin login inside the company file creates and manages users and roles. Intuit's Enterprise update steps check it at Company > Users > Edit the Admin user and say it must have a password.
- The company primary admin manages users and billing for your account in the Customer Account Management Portal (CAMPs).
- The Intuit Account primary admin manages add-on services such as payroll and payments. It can be a different person from the company primary admin.

### Transfer the company primary admin

1. Sign in as the current primary admin. Go to Company > My Company and select Manage Your Account.
2. Sign in with your Intuit Account details. Intuit notes these differ from your company file login.
3. In the Primary Contact section, select Change and choose the new primary contact.
4. Select Save and Close.

If the new person isn't listed, the admin has to invite them, and they must accept first. If the primary admin isn't available or can't make the change, Intuit says you can send a request to its account protection team.

### Transfer the Intuit Account primary admin

1. Go to Company > Users > Intuit Account User Management.
2. Find the secondary admin who will take over, select Edit, then Change Primary admin.
3. Enter the verification code sent to the admin's phone.
4. Intuit emails both admins. Once the secondary admin accepts, they become primary admin, and the old primary admin becomes a secondary admin.

Only a secondary admin can become primary admin, and there's only one primary admin at a time.

### Forgot the Admin password?

In QuickBooks 2020 and later, select I forgot my password on the sign-in screen, choose an email, and enter the token Intuit sends. For other users, the admin signs in, edits the user and enters a new password.

## Common problems

- There is already a user with that name: Intuit's first fixes are to update QuickBooks, then create or restore a portable company file. If that fails, fix data damage.
- A user with full access can't open Payroll Setup: that's by design. Only the Admin or an External Accountant can.
- Users without payroll permission see payroll on reports: check whether their role has unrestricted access, which Intuit says shows payroll transactions in reports. Intuit's Pro and Premier article adds that access to the Balance Sheet or Profit and Loss still shows paycheck names and amounts.
- Your outside accountant: Intuit recommends an External Accountant user. It reaches every area except customer credit card numbers, and the audit trail tracks its changes.
- People who only need payroll, time tracking or other connected services can be invited under Company > Users > Intuit Account User Management instead.

For data damage, see how to [verify and rebuild data in QuickBooks Desktop](https://logistify.ai/guides/quickbooks-desktop/verify-rebuild-data/).

## Where QuickBooks Desktop leaves the work to you

- QuickBooks doesn't know when someone changes jobs or leaves. The admin edits each user's roles by hand.
- A change to a shared role affects everyone who has it.
- Groups you fill by hand need updating as customers change, and data-level permissions don't limit third-party apps.
- Intuit's upgrade article mentions up to 30 simultaneous users in Enterprise. Tracking who still needs a login is up to you.
- Reviewing the Permission Access by Roles report is a periodic, manual job.

## Frequently Asked Questions

### How do I add a user in QuickBooks Desktop Enterprise?

Sign in as the admin and go to Company > Users > Set Up Users and Roles. On the User List tab, select New, enter a user name and password, add a role and select OK.

### How many predefined roles does QuickBooks Enterprise have?

Intuit says there are 14. You can edit them, but a change applies to every user with that role.

### Can I give one user different permissions from others in the same role?

Yes. Duplicate the role, assign the copy to that user, and edit the copy.

### Can I limit a user to certain customers in QuickBooks Enterprise?

Yes, with data-level permissions in Platinum, Diamond and Accountant. Create a customer group, then set the role's Customer Center access to Custom and choose that group.

### What happens if a user has two roles?

Intuit says the user gets the fuller permission where the roles differ. If only one role allows creating invoices, the user can create them.

### How do I change the primary admin in QuickBooks Desktop?

The current primary admin goes to Company > My Company > Manage Your Account and changes the Primary Contact. For payroll and payments, transfer the Intuit Account primary admin under Company > Users > Intuit Account User Management.

## Sources

- [Intuit: Create and manage users and roles in QuickBooks Desktop Enterprise](https://quickbooks.intuit.com/learn-support/en-us/help-article/manage-users/create-manage-roles-quickbooks-desktop-enterprise/L9z3XdBcQ_US_en_US)
- [Intuit: Areas, Activities and Access Levels](https://quickbooks.intuit.com/learn-support/en-us/help-article/manage-users/areas-activities-access-levels/L428lvxDi_US_en_US)
- [Intuit: Create data level permissions in QuickBooks Desktop Enterprise](https://quickbooks.intuit.com/learn-support/en-us/help-article/manage-users/create-data-level-permissions-quickbooks-desktop/L90YThj81_US_en_US)
- [Intuit: Create a customer group in QuickBooks Desktop](https://quickbooks.intuit.com/learn-support/en-us/help-article/manage-groups/create-customer-group-quickbooks-desktop/L70rUOjkD_US_en_US)
- [Intuit: QuickBooks Desktop users and restrictions](https://quickbooks.intuit.com/learn-support/en-us/help-article/manage-users/quickbooks-desktop-users-restrictions/L7bbEXsl2_US_en_US)
- [Intuit: Transfer the primary admin role in QuickBooks Desktop](https://quickbooks.intuit.com/learn-support/en-us/help-article/account-management/transfer-primary-admin-role-quickbooks-desktop/L7N2JHKLw_US_en_US)
- [Intuit: Use Intuit account to manage or invite users in QuickBooks Desktop](https://quickbooks.intuit.com/learn-support/en-us/help-article/manage-users/set-use-intuit-account-user-management-quickbooks/L8CtBaQKK_US_en_US)
- [Intuit: Reset your password for QuickBooks Desktop](https://quickbooks.intuit.com/learn-support/en-us/help-article/manage-passwords/reset-password-quickbooks-desktop/L063UZc12_US_en_US)
- [Intuit: Set up an External Accountant user in QuickBooks Desktop](https://quickbooks.intuit.com/learn-support/en-us/help-article/manage-users/set-external-accountant-user-quickbooks-desktop/L2acpmzY8_US_en_US)
- [Intuit: Update QuickBooks Desktop Enterprise to the latest version](https://quickbooks.intuit.com/learn-support/en-us/help-article/install-products/update-quickbooks-desktop-enterprise-latest/L7HvXPpR2_US_en_US)
- [Intuit: Upgrade to QuickBooks Enterprise from Desktop Pro/Premier](https://quickbooks.intuit.com/learn-support/en-us/help-article/install-products/upgrade-quickbooks-enterprise-desktop-pro-premier/L3etBHGkP_US_en_US)