Help
Five levels, enforced by the database rather than by hiding buttons.
| Level | Typical person | May |
|---|---|---|
| Owner | The partner who opened the account | Everything, including the subscription and closing the workspace |
| Admin | A partner or practice manager | Everything except billing: settings, custom fields, task templates, workload, activity log |
| Manager | A reviewing manager | Assign clients, review and approve, archive, workload, activity log |
| Accountant | The person doing the work | Edit any client, prepare returns, upload statements, close book months |
| Advisor | An external auditor or consultant | Read everything except portal passwords. Cannot change a single record. |
Accountant. They can do the work on any client but cannot reassign clients, approve their own work, or read the audit log. Move them to Manager when you want them reviewing other people's returns.
Give Advisor to anyone outside the firm — an auditor during fieldwork, a consultant looking at your workload. They see the picture and can change nothing.
An advisor is not simply shown fewer buttons. If they opened the browser console and called the API directly, the database would refuse the write. The same is true of every level — the rules live in PostgreSQL, not in the page.
Team → click the person → choose a new level. It takes effect immediately, on their next action. Only owners and admins can do this, and nobody can raise their own level.
Access level is not the same as what a person sees first. Every list has a Mine toggle that narrows it to the clients where they are the accountant or the reviewing manager. A junior with fifteen clients opens the desk to fifteen, not to the firm's hundred and fifty — without being blocked from looking wider when they need to.