Client Access Levels
This page explains the two layers of access that decide how your team works with clients. It also covers the four permission levels you can give an accountant on each client.
Two Layers of Access​
Access to a client is decided in two places, and an accountant needs both to work on a client.
- Atlas permissions control what a team member can do in Atlas. They decide which clients appear in the client list and whether the team member can add clients or manage other accountants' access.
- The permission level on the client controls what the accountant can do inside that client's Fiskl account. It is set for each accountant on each client.
The two layers are independent. A branch Owner in Atlas can hold Read Only on one client and Full Admin on another. A Member with limited Atlas permissions can hold Full Admin on the clients they are assigned to.
Atlas Permissions for Clients​
Atlas permissions come from the team member's branch role, plus any overrides set on their profile. The ones that matter for client management are:
- View All Clients or View Assigned Clients: Which clients appear in the client list
- Create Clients: Add new clients to the branch
- Grant Client Access: Add an accountant to a client, including yourself with Set Up Access
- Update Client Access: Change an accountant's permission level with Edit Permissions
- Revoke Client Access: Remove an accountant from a client
- View Client Notes and Update Client Notes: Read and edit the client note
- View Access History: See the client's revocation history
None of these open a client's Fiskl account on their own. The team member must also be assigned to the client. For the full list of Atlas permissions, see Roles and Permissions.
Permission Levels​
When you add an accountant to a client, you give them one of four permission levels. The level decides what the accountant can see and change in the client's Fiskl account.
| Level | Best for | Can do | Cannot do |
|---|---|---|---|
| Full Admin | Your lead accountant on the client | Everything an accountant can be given, including company settings, banking, users and the subscription plan | The actions listed under "Never Included" below |
| Billing Admin | Billing and credit control staff | Create, send and void invoices, bills and quotes. Record and refund payments. Add and edit clients and vendors. Run billing reports | Post accounting transactions, reconcile, change bank connections, company settings or users |
| Accounting Only | Bookkeepers working the ledger | Record and edit accounting transactions, reconcile, and run and export reports. View invoices and bills | Create or change invoices, bills, quotes or payments. Change company settings, bank connections or users |
| Read Only | Reviewers, seniors and auditors | View everything, including bank accounts, transactions, invoices, bills, reports and the audit trail. Export reports | Make any change |
The Atlas description of Accounting Only reads "View reports and transactions, no editing". An accountant with this level can record, edit and reconcile accounting transactions. They cannot create or change invoices, bills or payments. Use Read Only when the accountant must not change anything.
Never Included​
Some actions in a client's Fiskl account belong to the client, not their accountant. No permission level includes them, not even Full Admin:
- Submitting expenses as an employee
- Cancelling the client's Fiskl subscription
- Creating API keys
- Installing connected apps on the client's behalf
Which Level Applies​
Atlas works out an accountant's access to a client in this order:
- A permission level set on the client always applies. This holds whatever the accountant's Atlas role is, including Owner, Admin and Super Admin. If you set a Super Admin to Read Only on a client, they have Read Only on that client.
- A Super Admin with no level on the client has Full Admin on every client in the parent account.
- Anyone else with no level on the client has no access to it. They see Set Up Access or No Access in the client list.
Branch Owners and Admins do not get automatic access to every client on the branch. They need a permission level on each client they work on, like everyone else.
The Primary Accountant​
One assigned accountant can be marked as the primary accountant. This is the main contact for the client. Being primary does not change what they can do. Their permission level still decides that.
When you create a Charge Us client, you become the primary accountant with Full Admin. When you accept a client invitation, you receive Full Admin on that client. You can change both later on the client page.
The Default Permission Level​
Each branch has a default permission level. When you add an accountant to a client, the Permission Level field starts on this default. You can still select a different level before you select Grant Access.
To change the default:
- Go to Settings > Organization
- Find Default client access
- Select the level to use for this branch
- Select Save
Changing the default does not change anyone's existing access. It only affects access granted from then on.
If most of your team reviews rather than posts, set the default to Read Only. Then raise individual accountants on the clients they actively work on.
When Changes Take Effect​
A new or changed permission level applies the next time the accountant selects Access Fiskl for that client. If they are already working in the client's account, the change applies within an hour without them signing in again.
Revoking access works the same way. Once the change applies, the accountant can no longer open the client's account.
Common Issues​
An accountant gets an error saying they are missing a permission in Fiskl
Their permission level on this client does not include that action. Open the client page in Atlas, find the accountant under Accountant Access, and select Edit Permissions to select a higher level. The change applies the next time they select Access Fiskl.
A Super Admin or Owner has less access than expected on one client
Someone has set a permission level for them on that client, and that level applies whatever their Atlas role is. Check Accountant Access on the client page and change their level with Edit Permissions, or ask someone with Update Client Access to do it.
An Admin can no longer open a client they used to work on
Admins need a permission level on each client. Add them under Accountant Access on the client page and select their level.
A permission change has not taken effect yet
Ask the accountant to return to Atlas and select Access Fiskl for the client again. Otherwise the change applies on its own within an hour.
Related Topics​
- The Client List and Client Page — Add accountants to a client and change their level
- Roles and Permissions — Branch roles, parent roles and Atlas permissions
- Accepting Client Invitations — Review and respond to incoming client invitations
- Adding Clients — Add clients using Charge Us or Client Pays