Deciding who has access

Everyone who works with the business does not need the same view of it, and the roles reflect that.

The principle

The access a person's work requires. Not less, which produces requests to the owner for routine things, and not more, which puts financial detail in front of people who have no use for it.

What the roles differ on

Chiefly financial detail. Revenue, margins, owner compensation and the full financial picture sit with the roles that need them.

Beyond that: customer records, the ability to change settings, and the ability to invite others.

The specific roles and what each carries are set out in roles and permissions.

Common arrangements

The owner holds full access.

A bookkeeper or accountant needs the financial detail and generally nothing operational.

An office manager needs customers, scheduling and invoicing, and frequently not margins.

Field staff need their own work rather than the business's finances.

Separation is a control as well as a courtesy

The person who enters transactions and the person who reviews the accounts being different people is one of the more effective protections a small business has — see fraud prevention.

Each person gets their own account

Shared logins remove any record of who did what and mean access cannot be withdrawn from one person without withdrawing it from everyone.

Adding someone is done from inviting a team member.

When someone leaves

Access is removed the same day, alongside keys and equipment — see terminations.

Protecting the accounts

Two-factor sign-in is worth requiring on any account with financial access.

Last reviewed 2026-07-30

Deciding who has access — Omnyra Wiki | Omnyra