Enhanced interface

Administration permissions

Administration permissions control who has access and visibility to Administration functionality.

When a new feature is added, you typically need to assign permissions to users. This allows you to control access of who can use those new features.

A user's effective permissions can be influenced by their user type, role, and admin privileges. Learn more about user types and permissions.

Use shortcuts to assign or remove permissions quickly

At the top of the Activities and lists section and Reports section, there are 3 options that let you quickly configure permissions across that application area. For example, to assign users full access to Accounts Payable, select All at the top of the Activities and lists section and Reports section.

Area	Shortcut or Radio button options
Activities and lists	None: User has no permissions to activities and lists. Read only: User can list and view records. All: User has permissions to all activities and lists.
Reports	None: User has no permissions to run reports. Read only: User can run a select subset of reports only. All: User can run all reports. The Read only and All options function the same for reporting.

Area

Shortcut or Radio button options

Activities and lists

None: User has no permissions to activities and lists.
Read only: User can list and view records.
All: User has permissions to all activities and lists.

Reports

None: User has no permissions to run reports.
Read only: User can run a select subset of reports only.
All: User can run all reports.

The Read only and All options function the same for reporting.

Activities and lists	Permissions
Application subscriptions	List: Displays lists of applications and custom packages. Also, this permission allows users to install and uninstall custom packages. View: Users can see the configuration page of applications that they are subscribed to. Requires the List permission. Subscribe: Assign both Subscription and Configure permissions to allow users to subscribe to applications. Requires the List permission. Configure: Allows users to edit the configuration page for their subscribed applications. Requires the List permission. Remove: Enables users to unsubscribe from a subscribed application. Requires the List permission. Assign Users: A user-based permission. Users can select the Subscriptions feature on user records, external user records, and web services user records to see their application subscriptions. Requires the Users List permission.
Usage insights	Usage insights unifies information across your company and provides visibility into the workings of your company. Admin users are automatically granted access to the dashboard. View: Enables users to access the Usage insights dashboard.
Grant admin rights	Grant: Allows Business users with limited admin privileges to assign limited or no admin privileges to Business users. If you assign the Grant permission to users, also assign the Users List, Add, and Edit permissions. This allows Business users with limited admin privileges to grant admin rights to Business users.
Company info	View: Provides a read-only view for company information. Edit: Allows users to change company information.
Messages	Add: Allows users to add company messages that are displayed on the Company messages list and Message board. Edit: Users can edit company message information. Delete: Enables users to delete company messages.
Users	User permissions control the Users, Groups, Roles, External users, and Web Services users features. List: Displays lists of user records, user groups, roles, external user records, and web services user records. View: Users can see information, such as contact details, for particular users, user groups, roles, external users, and web services users. Requires the List permission. Add: Allows users to add user records, user groups, roles, and web services user records. This permission also allows users to assign members to groups for user groups, user records, and web services user records. Furthermore, adding users and web services users incurs additional costs. Requires the List permission. Edit: Users can update information for users, user groups, roles, external users, and web services users. Also, this permission allows users to edit the contact name and preferences of user records, external user records, and web services user records. Requires the List permission. Delete: Enables users to delete user records, user groups, roles, and web services user records. Also, this permission allows users to remove members from groups for user groups, user records, and web services user records. Requires the List permission. Permissions: A user-based permission. Users can assign permissions to users, external users, and web services users. From the Application subscriptions activity, assign the Assign users permission so users can access user application subscriptions. Requires the List and Application subscription Assign users permissions. Groups: A retired permission that is no longer used. Impersonator: A retired permission that is no longer used. Assign to Business users with limited admin privileges the Grant admin rights Grant permission, so they can grant limited or no admin privileges to Business users.
External authorizations	List: Displays a list of external authorization records. View: Provides a read-only view for external authorization information. Requires the List permission. Add: Allows users to add external authorization records. Requires the List permission. Edit: Users can edit the access, description, and expiration date fields of external authorization information. Requires the List permission. Delete: Enables users to delete external authorization records. Requires the List permission.
Instances	List: Displays a list of instances. Add: Allows console users to add instances. Requires the List permission. Edit: Enables console users to change the description of instances. Also, console users can edit assignments by assigning members to instances. Requires the List permission.
Templates	List: Displays the Manage Templates list. Add: Allows users to add console templates. Requires the List permission. Edit: Users can edit the description and status of a console template. Requires the List permission. Delete: Enables users to console delete templates. Requires the List permission.
Cancel service	Run: Provides the permission for users to opt out of the Sage Intacct service. Warning: Only implementers should use this option to opt out of the Intacct service. Because you lose all your company data, data permanently deletes. Do not opt out of the Intacct service unless you are certain that you no longer need this service.
Access log	Run: Allows users to generate the access log.
Subscription usage	View: Allows users to view recent activity for subscriptions that are billed based on usage, in Company > Admin > Subscriptions > Usage. The Usage page is available when your company is subscribed to AP Automation. Full admin users with this permission can view a list of recent automated transactions that are subject to billing, in accordance with your agreement. To drill down to the detail level, a user must also have the Accounts Payable permission for AP purchase invoices: View.