Learning to manage users in QBO is one of the most critical administrative skills any QuickBooks Online ProAdvisor or small business owner can develop. User management in QuickBooks Online controls who can see sensitive financial data, who can enter transactions, and who can change company settings — making it a direct line of defense for your business's financial integrity. Whether you are a sole proprietor adding your first employee or an accountant onboarding a new client firm with a team of bookkeepers, understanding the nuances of QBO user roles is absolutely non-negotiable.

QuickBooks Online supports multiple subscription tiers — Simple Start, Essentials, Plus, and Advanced — and each tier unlocks a different maximum number of users. Simple Start allows only one billable user, while QBO Advanced can accommodate up to 25 users, making it the preferred choice for growing companies with larger accounting teams. Knowing exactly how many seats your subscription includes prevents costly surprises and helps you plan your team's onboarding process from the very first day.

User roles in QBO are not one-size-fits-all. The platform offers a range of role types including Company Administrator, Standard User, Reports Only, Time Tracking Only, and dedicated Payroll roles. Each role type carries a specific set of permissions that either grant or restrict access to modules like banking, accounts receivable, accounts payable, payroll, and reporting. Selecting the wrong role for a team member can expose confidential payroll data, give unintended editing rights, or block someone from doing their job entirely.

One of the most underappreciated features in QBO is the ability to invite your accountant or ProAdvisor as a special Accountant User. This dedicated role gives your accounting professional full administrative-level access without consuming one of your paid user seats. That distinction matters enormously for small businesses operating on tighter budgets, because it lets you keep your subscription tier lower while still giving your ProAdvisor everything they need to reconcile accounts, run payroll, and fix coding errors.

Security is another reason to take user management seriously. If a bookkeeper leaves your company, you need to be able to deactivate their account immediately to prevent unauthorized access. QuickBooks Online makes this straightforward, but only if you have a Company Administrator who knows where to find the Manage Users panel and how to toggle a user's status from active to inactive. Delaying that step — even by 24 hours — can leave your financial records exposed.

For those preparing for the QuickBooks Online ProAdvisor certification exam, user management questions appear regularly across multiple topic domains. Examiners test your understanding of role permissions, the difference between billable and non-billable users, and the process for granting or revoking access. Studying these concepts thoroughly is essential not just for passing the exam, but for serving clients competently in real-world practice. If you want to explore how user access intersects with other QBO features, read our guide on manage users in qbo and related sales tracking permissions.

This guide walks you through every aspect of QBO user management, from adding your first team member to setting granular custom permissions in QBO Advanced. By the end, you will understand every user type, the step-by-step process for inviting and editing users, common mistakes that ProAdvisors make in client environments, and the best practices that keep your clients' books secure and audit-ready. Each section is designed to build practical, exam-ready knowledge you can apply immediately in live QBO accounts.

Adding a new user to QuickBooks Online is a fast process once you know the exact path through the interface. Start by clicking the gear icon in the upper right corner of your QBO dashboard — this opens the Account and Settings menu. From there, select Manage Users under the Your Company column. If you are on a QBO Plus or Advanced subscription, you will see a list of all currently active and inactive users, along with a prominent Add User button in the top right corner of that panel.

When you click Add User, QBO presents you with a role selection wizard. The first screen asks you to choose the user type: Standard User, Company Administrator, Reports Only, Time Tracking Only, or a payroll-specific role if payroll is enabled on your account. This selection determines which subsequent screens you will see. For Standard Users, the wizard then walks you through four permission categories — customers and sales, vendors and purchases, banking, and payroll — where you can toggle access levels between none, limited, and all.

After setting the permissions, you enter the new user's first name, last name, and email address. QuickBooks Online will send them an invitation email with a unique link that expires after 30 days. The new user must click that link, create a QuickBooks account (or sign in to their existing Intuit account), and then they will be added to your company file with the permissions you configured. Until they accept the invitation, they appear in your Manage Users list as Invited rather than Active.

Editing an existing user's permissions is just as straightforward. Return to Manage Users via the gear icon, find the user in the list, and click the Edit button (pencil icon) to the right of their name. You can change their role type, adjust their specific permission settings within the Standard User category, or update their email address. Changes take effect immediately — the user does not need to log out and back in for new permissions to apply in most cases, though a refresh of their browser session can help if they report unexpected access issues.

To deactivate a user — for example, when an employee leaves the company — go to Manage Users, find the user's row, click the dropdown arrow next to the Edit button, and select Delete. Note that QBO does not permanently erase the user's history; any transactions they entered remain intact and attributed to their username. The user simply loses the ability to log in. You can reactivate a deleted user later if needed by finding them in the inactive users list and clicking Make Active.

Transferring the primary admin role requires a specific process. Only the current primary admin can initiate a transfer, and the transfer must be accepted by the new admin within 10 days. To start, go to Manage Users, find the user you want to promote, select Make Primary Admin from their dropdown menu, and confirm the action. A notification email is sent to the new primary admin, who must log in and accept the transfer before it finalizes. This protection prevents unauthorized hijacking of the top-level admin seat.

For accountant users specifically, the invitation flow differs slightly. Instead of going through the Manage Users panel, accountants are typically invited via the My Accountant menu item in the left navigation panel. Clicking that option lets you enter your ProAdvisor's email address, and QBO sends them an invitation to connect. Once accepted, they appear in your Manage Users list under the Accountant tab — separate from your regular users — making it easy to distinguish your internal team from your external accounting partners.

Even experienced ProAdvisors run into user management mistakes that create headaches for their clients. One of the most common errors is inviting a new employee as a Company Administrator when the intent was to give them broad but not total access. Administrator access includes the ability to delete the company account, change subscription plans, add and remove other users, and view every financial detail including payroll. Granting this role carelessly to a bookkeeper or office manager is a significant security risk that can be difficult to walk back without awkward conversations.

A second frequent mistake is failing to remove users promptly when employees leave. In a busy firm, the offboarding checklist sometimes focuses on physical access (returning keys, badges) while digital access is overlooked for days or weeks. During that window, a former employee with Standard User or even Administrator access can log in and view, edit, or export financial records. Implementing a formal digital offboarding checklist that includes QBO user deactivation as a first-day step — not an afterthought — eliminates this vulnerability entirely.

Many business owners do not realize that deleted users in QBO are not permanently erased. Their transaction history remains intact, and they can be reactivated at any time by an administrator. This is actually a feature, not a flaw — it means that if you accidentally delete an active user, you can restore their access in seconds without losing any of their historical data. However, it also means that the Manage Users panel accumulates a growing list of inactive users over time, which should be periodically reviewed to confirm that no former employees have been quietly reactivated without authorization.

Another error involves the Reports Only role. Business owners sometimes assign this role to a partner or investor who later needs to download and share financial reports. What they discover is that Reports Only users can view reports on screen but have limited ability to export or print certain report types depending on the QBO subscription tier. If a user's primary function is generating and distributing financial reports to external stakeholders, clarify the export capabilities before assigning this role, and consider whether a Standard User with limited permissions might serve them better.

Custom permissions for Standard Users are also a source of confusion. The four permission categories — customers and sales, vendors and purchases, banking, and payroll — must each be set individually. A common misconfiguration is setting banking to None for a bookkeeper who needs to categorize bank feed transactions, only to find out later that the bank feed categorization function actually requires at least Limited banking access. Testing each user's access by logging in as them (via the View as User feature in QBO Advanced) before their first day prevents these issues from surfacing at inopportune moments.

Finally, many firms neglect to document their user access decisions. When a client asks why a particular employee has access to accounts payable but not banking, the answer should be retrievable from a written policy, not reconstructed from memory. Maintaining a simple user access register — even a spreadsheet listing each user, their role, their permission levels, the date access was granted, and the name of the administrator who approved it — is a low-effort practice that pays dividends during audits, staff transitions, and any security review conducted by your clients' insurers or compliance teams.

QBO Advanced subscribers have an additional tool at their disposal: custom roles. Unlike the standard five role types, custom roles in Advanced let you define precisely which features and reports a user can access, down to individual sub-features within each module.

You can create a role called AP Specialist that includes bill entry and bill payment but excludes check writing and banking transfers, then apply that same role to every AP team member with one click rather than configuring each user individually. This capability makes QBO Advanced significantly more attractive for companies with more than five people in their accounting department.

For QuickBooks Online ProAdvisor exam candidates, user management is a tested domain that rewards thorough preparation. Exam questions in this area typically fall into three categories: conceptual questions about what each role type can and cannot do, scenario-based questions where you must identify the correct role for a described employee situation, and procedural questions about the steps required to add, edit, or remove a user. Understanding all three categories deeply is the key to earning points in this section of the certification exam.

Conceptual questions are the most straightforward to prepare for. Create a simple table that maps each user type — Administrator, Standard User, Reports Only, Time Tracking Only, Accountant User — against a checklist of capabilities: can enter transactions, can run payroll, can see banking, can add users, counts against seat limit, and so on. Drilling this table until you can recall it without hesitation will handle most conceptual questions in under 30 seconds per question, giving you more time for the harder scenario-based items.

Scenario questions are trickier because they require you to apply the role definitions to a specific business situation. A typical scenario might read: A client has a receptionist who needs to enter customer invoices and receive payments but should not be able to issue refunds or see any banking information. Which user type and permission level is most appropriate? The answer is Standard User with Limited customers and sales access and None for all other categories. Practicing these scenarios in advance — and understanding the reasoning behind each answer — is far more valuable than memorizing answers by rote.

Procedural questions on the exam often describe a multi-step task and ask you to identify which step comes first, or which menu path leads to the correct screen. For user management, the critical paths to know are: gear icon → Manage Users for adding and editing standard users, the My Accountant menu item for inviting your ProAdvisor, and the gear icon → Manage Users → dropdown → Make Primary Admin for transferring the admin role. Knowing these three paths cold eliminates procedural uncertainty during the exam.

One nuance that frequently appears in exam questions is the distinction between the primary administrator and a regular administrator. QBO allows multiple users to hold Company Administrator status, but only one can be the primary admin. The primary admin is the only user who can contact Intuit support for account ownership issues, initiate a subscription cancellation, or transfer primary admin status to someone else. Regular admins have nearly identical day-to-day access but lack these account-ownership-level capabilities. This distinction is subtle but the exam tests it directly.

Time tracking users also appear in exam questions, often in scenarios involving service businesses that use QBO's time entry feature to log billable hours. The exam may ask which user type is appropriate for a field technician who needs to log hours but should not have any access to financial data.

The answer is always Time Tracking Only — not a Standard User with minimal permissions, because even the most restrictive Standard User configuration still exposes some financial data that Time Tracking Only users cannot see. Understanding this edge case can be the difference between a correct and incorrect answer on a question that appears simple on the surface.

Finally, make sure you understand how the Audit Log connects to user management. The Audit Log, accessible through the Accountant Tools menu, records every action taken in QBO including who made each change, what was changed, and when. On the exam, this feature is often mentioned in the context of reviewing user activity and identifying unauthorized changes.

Knowing that the Audit Log exists, where to find it, and what information it captures rounds out your user management knowledge and demonstrates the kind of complete, integrated understanding that the ProAdvisor certification is designed to validate. For further context on related QBO features and sales tracking permissions, explore our detailed coverage of manage users in qbo in the context of sales number configuration.

Beyond passing the ProAdvisor exam, mastering user management in QBO has real-world practice implications that affect every client engagement you take on. When a new client onboards with your firm, one of your first tasks should be a user access audit. Log in to their Manage Users panel, review every active user, confirm that their roles match their current job responsibilities, check for any former employees who were never deactivated, and verify that your accountant seat is configured correctly. This audit takes less than 15 minutes and can uncover significant security gaps that the client was completely unaware of.

Establishing a documented user access policy for each client is a value-added service that distinguishes a ProAdvisor from a basic bookkeeper. The policy does not need to be lengthy — a single page that defines which roles are appropriate for which job titles, who is authorized to add and remove users, and how often user access should be reviewed is sufficient. Clients who have never thought about user access governance are often surprised that their accountant cares about it, and that surprise frequently translates into increased trust and longer client relationships.

When setting up a new QBO company file from scratch, establishing the correct user structure before any transactions are entered is the cleanest approach. Start by configuring the owner's account as primary admin, then add your accountant seat, then build out the internal team's user accounts with appropriate roles. Doing this in the correct sequence prevents the common problem of transactions being entered under an admin account when they should have been entered under a bookkeeper's account — a distinction that matters for the Audit Log and for any internal control review conducted later.

For clients on QBO Advanced who benefit from custom roles, invest time in designing a role matrix before creating individual users. A role matrix is simply a spreadsheet that maps your client's job titles to the QBO modules they need, with specific access levels noted for each module. Use this matrix to create your custom roles in QBO, then assign users to those roles. When a new hire joins the company, you simply assign them to the appropriate pre-built role rather than configuring their permissions from scratch, which saves time and ensures consistency across users in the same job function.

Training your clients' internal admins is an investment that pays off in fewer emergency support calls. When a Company Administrator knows how to add and deactivate users, check the Audit Log, and interpret user access reports, they can handle routine user management tasks independently without waiting for their ProAdvisor to step in. Create a simple one-page reference guide for your clients that covers the four most common user management tasks — add user, edit permissions, deactivate user, and run Audit Log — and share it during your initial onboarding session.

The relationship between user management and data security extends beyond QBO itself. Many businesses use QBO alongside other cloud applications — payroll processors, CRM systems, e-commerce platforms, and bank portals — and a user who has been deactivated in QBO may still have active accounts in those connected systems. When offboarding an employee, create a comprehensive list of all connected applications and ensure that access is revoked in every system simultaneously. QBO user deactivation is one step in a larger digital offboarding process, not the entirety of it.

Staying current with QBO updates is also part of user management best practice. Intuit periodically updates the user interface for the Manage Users panel, adds new permission options, or changes the flow for specific tasks like primary admin transfers. Subscribing to the QuickBooks Online blog and reviewing the What's New section within QBO ensures you are always working with the most current procedures. When you take the ProAdvisor certification exam or recertification exam, updated question pools often reflect recent product changes — so staying current with the platform also keeps your exam knowledge fresh and accurate for annual recertification cycles.