Permissions and roles report for a single user

You can run a permissions report to display all of a user's effective permissions. This report is a consolidated view of all the permissions that a user has across the company and it considers their user type, roles (for role-based companies), and permissions.

Use this report to:

• Display permissions in a single view
• Review user access and workflow
• Verify that users have access only to authorized data

In role-based companies, you can also view the roles assigned to a user, and the groups that a user belongs to, from different tabs within the report.

To access this page, go to Company > Admin > Users or Roles. In a user-based company, select View permissions next to the user whose permissions to view. In a role-based company, select View permissions and roles.

Run the Permissions report

By default, this report shows all the permissions that have been explicitly assigned to the user. In other words, someone checked the box that gave the user that permission.

Because some features are related or depend on each other, the user might have additional permissions that are not explicitly assigned. To view these additional permissions, select Show derived permissions on the Permissions tab of the Permissions report.

1. Go to Company > Admin > Users. The Users list appears.
2. In a user-based company, select View permissions next to the user whose permissions to view. In a role-based company, select View permissions and roles. A consolidated report of all the user's permissions and roles appears.

Run the Permissions report for external users

Users who slide into your company from a console (like the Accountant or Partner Console) will appear in the External Users list. Viewing effective permissions for external users works the same way; just start from the External Users list.

1. Go to Company > Admin > Users > External users. The External Users list appears.
2. In a user-based company, select View permissions next to the user whose permissions to view. In a role-based company, select View permissions and roles. A consolidated report of all the user's permissions and roles appears.

Export the report

You can export the Permissions and roles report to a CSV file anytime you run it.

To export a report:

1. Go to the Users list.
2. Select View permissions and roles for a user.
3. Select Export permissions, then open the downloaded CSV file to see the report.

View roles and user groups

If you're in a role-based company, you can view the roles and user groups assigned to the user from the Permissions and roles report.

To view roles assigned to the user:

1. Go to Company > Admin > Users.
2. Select the Roles tab.

To view user groups that a user belongs to:

1. Go to Company > All > Users & contacts > Users.
2. Select Groups.

Frequently asked questions (FAQs)

What's in this report?

• User information
• Permissions report
• Roles (for Role-based companies only)
• User groups

User information

Heading	Description
User ID	The user ID assigned to the selected user or group.
Username	The name for the user.
Type	The user type that reflects the features that this user requires. Business users can be given access to any features, but other user types have limited access. See the list of user types.
Admin privileges	Displays whether the user or group has Full or Limited administrative privileges. If the user or group does not have administrative privileges, Off is displayed.

Permissions report

Report column heading	Description
Subscription	Shows which applications are currently assigned to the user.
Activities, lists, and reports	The name of the activity, list, or report within that application to which those users and groups have been granted access permission.
Permissions	The types of permissions granted (for example, List, Add, Modify, Delete, and so on).
Show derived permissions	Select this box to display the permissions not explicitly assigned to the user. These permissions are contingent on other enabled permissions. Permissions marked with an asterisk (*) are derived from another application’s permissions. When reviewing user permissions, you can hover over any permission marked with an asterisk to see its origin. This includes permissions automatically granted to Admins, or those derived from other permissions already assigned to the user. Details specific to that user and permission are displayed. This information is not included when you export the permission report.

Roles (for Role-based companies only)

Report column heading	Description
Role name	Name of the role.
Description	Description of the role.
Subscriptions	Shows which applications are currently assigned to the user.

User groups

Report column heading	Description
User group name	Name of the user group.
Description	Description of the user group.