Grant and restrict access to reports
In general, permissions determine what you can see and do with a report within a specific area of the product. For example, a user might have permission within the General Ledger to only view financial reports. The same user might also have full access permissions for Accounts Payable reports.
Your assigned user type specifies what you can see and do within Sage Intacct, including your ability to control access to reports. To update permissions, you must be a full administrator or be a limited administrator with privileges to assign and update permissions.
Control who can run, view, and edit standard application reports
| Subscription |
Administration |
|---|---|
| Regional availability |
All regions |
| User type | Business user with admin privileges |
| Permissions | Users: List, View, and Edit |
This procedure applies to standard application reports only.
- Ensure you are working at the top level of your Intacct company by selecting Top level above the application bar.
-
Go to Company > Admin > Users, roles, and groups > Users.
-
Find the user that you want to assign permissions to.
Depending on the permissions model for your company, you will either edit the user's subscriptions or assign a role to a user.
-
Select Edit at the end of the row.
- Select Subscriptions.
-
Next to the application for which you want to set or change permissions, select Permissions.
The Permissions window displays with all of the activities and reports you can assign to the user.
- Select the checkboxes for the activities and reports you want the user to have access to.
- Select Save.
- Ensure you are working at the top level of your Intacct company by selecting Top level above the application bar.
-
Go to Company > Admin > Users, roles, and groups > Users.
-
Locate the user in the list.
Depending on the permissions model for your company, you will either edit the user's subscriptions or assign a role to a user.
- Select Subscriptions for the user.
-
Next to the application for which you want to set or change permissions, select Permissions.
The Permissions window displays with all of the activities and reports you can assign to the user.
- Select the checkboxes for the activities and reports you want the user to have access to.
- Select Save.
| Subscription |
Administration |
|---|---|
| Regional availability |
All regions |
| User type | Business user with admin privileges |
| Permissions | Users: List, View, and Edit |
When you assign permissions to a role, you automatically grant those permissions to all the users assigned to that role.
-
Go to Company > Admin > Users, roles, and groups > Roles.
- Find the role that you want to change permissions for and select Subscriptions.
- Find the application that you want to set or change permissions for, and select Permissions.
The Permissions window displays with the lists, activities, and reports you can assign to the role. - Select the checkboxes for the activities and reports that you want the role to access.
- Select Save.
- Change other permissions, as needed.
- When you're finished changing all permissions, select Save at the top of the Roles subscription page.
| Subscription |
Administration |
|---|---|
| Regional availability |
All regions |
| User type | Business user with admin privileges |
| Permissions | Users: List, View, and Edit |
Use shortcuts to grant or remove permissions quickly
At the top of the Activities and lists and Reports sections, you'll find 3 radio buttons that let you quickly configure permissions across that product area. For example, granting full access to Accounts Payable is as easy as selecting the All option at the top of the Activities and lists section and at the top of the Reports section.
| Area | Shortcut or Radio button options |
|---|---|
|
Activities and lists |
|
|
Reports |
|
| Subscription |
Administration |
|---|---|
| Regional availability |
All regions |
| User type | Business user with admin privileges |
| Permissions | Users: List, View, and Edit |
In the Permissions page, scroll down to the Reports section and select Run to allow users to run any relevant reports. This permission includes the ability to view, print, and export reports. Separate permissions need to be set in General Ledger for financial reports.
, however.
Access to financial reports can vary depending on your permissions. The ability to view, add, and edit financial reports is controlled by separate General Ledger permissions.
Working with financial reports involves multiple tasks: running reports, editing reports, drilling down into a report, and so on. Each of these can require a specific set of permissions, both for the General Ledger and for the Company.
Make sure that you have all of the necessary permissions when working with financial reports.
What user types can access reports?
Not all user types can access and drill down into financial reports. For more information, see Permissions for financial reports.
- Business users with full or limited administrative access can drill down into financial reports
- Project users and Warehouse uses can drill down into reports in companies with Project or Warehouse (Inventory) subscriptions
- Employee users can view reports if they have report permissions, but might not be able to drill down into underlying data
- Learn about the different types of permissions available in ICRW and how to grant designer access: Assign Interactive Custom Report Writer Designer permission to a role.
- Learn how to set user permissions in Interactive Custom Report Writer (ICRW) and add ICRW reports to the menu: Set user permissions and add ICRW reports to the menu.
| Subscription | Interactive Custom Report Writer
Platform Services |
|---|---|
| Regional availability |
All regions |
| User type | Interactive Custom Report Writer: Business, Project Manager |
| Permissions |
Interactive Custom Report Writer: Run, List, View, Add, Edit, Delete Platform Services: Run, List, View, Add, Edit, Delete
|
You restrict user and group access to a report in the Permissions section of Advanced Settings. A link to Advanced Settings is available for each report in the report list.
- In the report list, select Advanced Settings for the report.
- In the Group or user field, select Group or User.
Depending on what you select, the next field is either Group name or Username.
- In the Group name or Username field, select the group or user you want to restrict.
- Select Add. The group or user is added to the permissions table.
- Select inside the Access rights column next to the group or user added, and select Deny.
- Save the settings. The group or user is restricted from accessing the report.
If you’ve restricted a group, you can give specific people in the group access to a report by adding the users to the permissions table. After you add a user to the permission table, set user access rights to Allow and save the settings.
Interactive Visual Explorer (IVE requires a separate subscription. For more information, contact your Sage Intacct administrator.
| Subscription | Interactive Visual Explorer |
|---|---|
| Regional availability |
All regions |
| User type |
Business |
| Permissions |
|
You can use the following task to grant or remove IVE permissions for a user.
- To access subscriptions, go to Company > Admin > Subscriptions.
- Scroll to Interactive Visual Explorer subscription area and select Configure.
The Interactive Visual Explorer configuration page indicates whether or not you can define any Explorers.
If you purchased Interactive Visual Explorer: Team, then you do not need to define any Explorers on this form. You can give access to IVE to any Business user. - If you can define a single Explorer, select the user from the dropdown.
If an Explorer is already defined, select another user to replace the existing Explorer.
- Select Save.