An administrator can do everything in a business file that its subscription includes. Everyone else can do only what their roles allow. Roles add up, and only an administrator can change them: open Manage › Users › Users, click the person, and use their Permissions tab.
Before you start
- You must be an administrator of the business file to change roles.
1. Open the person
Open Manage › Users › Users and click the person's name.
2. Choose their roles
On the Permissions tab, switch on each role they need. Roles add up, so a person has everything from all their roles together. The ⓘ next to a role describes it.
To match someone else, use Copy permissions from another User.
3. Link contacts, if the role needs it
Customer Own, Supplier Own and Tax Clerk Limited work only for particular contacts. Pick those under Linked Contacts and click Save.
4. Save
Click Save All Changes. The change is recorded against the person.
Administrators and the owner
An administrator needs no roles: they can do everything the business file's subscription includes. Only an administrator can change another person's roles, linked contacts or administrator status. The owner of the business file is always an administrator.
Being Allowed to invite new users is separate from roles. It lets a person invite others, but not change anyone's roles.
Which role do I need?
The roles that allow the most common jobs:
- Create, save or finalise invoices and quotes, including drafts: Invoicing Manager.
- Create, save or finalise bills, including drafts: Bills Manager or Invoicing Manager.
- Pay bills: Accounts Payable, Accountant or Bills Manager.
- Edit contacts: Invoicing Manager, Bills Manager or Compliance Manager.
- Finalise bank transactions: Accountant, Invoicing Clerk, Invoicing Manager, Bills Clerk, Bills Manager or Payroll Manager.
- Finalise journals: Accountant.
- Finalise a pay event: Payroll Manager.
- Lodge STP and super: Payroll Manager or Compliance Manager.
- Lodge the business's own BAS: Compliance Manager.
- Lodge for clients (tax and BAS agents): Tax Manager.
- Manage a trust account: Tax Manager.
For anything else, look up the name shown in the message: see Fix a "You don't have permissions" message.
Accounting roles
- Accounts Receivable: save bank transactions and journals as drafts, process bank feeds, import transactions, and manage customer payments and receivables. It can view invoices but not save them.
- Accounts Payable: save bank transactions and journals as drafts, process bank feeds, and pay bills. It can view bills but not save them.
- Accountant: finalise bank transactions and journals, manage the chart of accounts and assets, see accounting reports, and pay bills. It can view contacts, invoices and bills but not edit or save them.
Invoicing roles
- Customer Own: for linked customers only, view their details, invoices and quotes. It cannot save an invoice.
- Invoicing Clerk: view all customers, invoices and quotes, and finalise bank transactions. It cannot save an invoice.
- Invoicing Manager: manage invoices, quotes, recurring invoices, customer payments, contacts and invoice settings. It can also finalise bills.
Billing roles
- Supplier Own: for linked suppliers only, view their details and bills. It cannot save a bill.
- Bills Clerk: view all suppliers and bills, and finalise bank transactions. It cannot save a bill.
- Bills Manager: manage bills, bill payments, contacts, stock and TPAR, and see purchase reports.
Compliance roles
- Compliance Manager: lodge the business's BAS, STP and super, and manage contacts, employees, users and TPAR.
- Settings Admin: manage the chart of accounts, business details, departments and sites, and invoice, bill and payroll settings.
- Auditor: see reports and most records. It is meant for review, so give it to people who should look rather than change.
- Trust Account Auditor: view the trust account and its supporting records.
Payroll and team roles
- Payroll Clerk: view employees, prepare pay events as drafts, manage super and timesheets.
- Payroll Manager: manage employees, payroll settings, leave and timesheets, finalise pay events, and lodge STP and super.
- Site Manager: manage the employees, leave and timesheets of people in sites and departments they manage.
- Human Resources Manager: manage employees, users, leave and timesheets for everyone.
- Timesheet Manager: manage everyone's timesheets.
General roles
- Own Records: enter their own timesheets and log book, and see their own projects.
- Can Add Bank Feeds: link accounts for bank feeds.
- Banking Approver: see banking reports.
Practice roles (tax and BAS agents)
- Tax Clerk Limited: for linked contacts only, view and prepare tax documents.
- Tax Clerk: view and prepare tax documents for all clients, and view the trust account.
- Tax Manager: everything a Tax Clerk does, plus lodge and manage the trust account.
Project roles
- Project Team Manager: manage the projects and tasks assigned to them.
- Project Manager: manage all projects and tasks.
Questions
Can an administrator be refused something?
Yes, if the business file's subscription does not include that part of Exacc. No role changes that. See Fix a "You don't have permissions" message.
Can Exacc support change someone's roles?
No. Roles are the business's own decision, so an administrator of the file makes the change.
Related guides
- Fix a "You don't have permissions" message
- Invite a user to your business file
- Add a user or employee without a login
- Manage your subscriber account and team
Checked against Exacc on 31 October 2026. Machine-readable version