Skip to main content

Roles and Permissions

This guide is a full reference to the roles and permissions that control what each team member can do in Atlas.

How Roles and Permissions Work​

Every team member has a role on each branch they belong to. Each role comes with a default set of permissions. You can then add or remove individual permissions for any team member on any branch.

Some team members also have a parent role, which gives them access across all branches.

Branch Roles​

A team member can have a different role on each branch they belong to.

RoleWhat it allows
OwnerFull control, including billing and user management
AdminManage clients and accountants, and view billing
MemberAccess assigned clients only

Parent Roles​

A team member can have one parent role, or none.

RoleWhat it allows
Super AdminComplete access to all branches, users, billing, and settings
Parent BillingView invoices, charges, and upcoming fees across all branches
ViewerRead-only access to all branches and client data

A team member with no parent role only has access to the branches they are assigned to.

Permissions​

Permissions are grouped into categories. You can grant them as extra permissions when you invite someone to a single branch, or change them later for any team member.

You can only grant permissions you hold yourself. Permissions marked Owner only can only be granted by an Owner.

Organization​

PermissionWhat it allows
View OrganizationView branch details and settings
Update BranchChange the branch name and settings
Delete Branch (Owner only)Permanently delete the branch

Billing​

PermissionWhat it allows
View BillingView invoices and billing history
Manage Billing (Owner only)Update payment methods and subscriptions

Team​

PermissionWhat it allows
View Team MembersView the list of accountants
Invite Team MembersSend invitations to new accountants
Remove Team MembersRemove accountants
Change RolesChange accountants' roles
Add to BranchesAdd accountants to other branches
View Team PermissionsView permission changes made for team members
Manage Team Permissions (Owner only)Grant or revoke individual permissions for team members

Parent Roles​

PermissionWhat it allows
View Parent RolesView parent role assignments across branches
Grant Parent Roles (Owner only)Assign Super Admin, Parent Billing, or Viewer
Update Parent Roles (Owner only)Change existing parent role assignments
Revoke Parent Roles (Owner only)Remove parent roles from team members

Parent Account​

PermissionWhat it allows
View All BranchesView every branch in the organisation
Create BranchCreate new branches
Manage All AccountantsManage accountants across all branches
Consolidated BillingView billing across all branches
Parent AdministrationFull control of the parent account

Clients​

PermissionWhat it allows
View All ClientsAccess all client accounts
View Assigned ClientsAccess only assigned clients
Create ClientsAdd new client accounts
Invite clientsCreate client invitation links and invite businesses to connect
Delete ClientsRemove client accounts
Update ClientsChange client information
Sync ClientsSync clients from the accounting platform
View Client NotesRead client notes and comments
Update Client NotesEdit client notes and comments

Access Control​

PermissionWhat it allows
Grant Client AccessGive accountants access to clients
Revoke Client AccessRemove accountants' access to clients
Update Client PermissionsChange client permission levels
View Access HistoryView client access audit logs

Documents​

PermissionWhat it allows
View DocumentsView documents stored in the organisation
Upload DocumentsUpload new documents
Delete DocumentsRemove documents

HMRC MTD​

PermissionWhat it allows
View HMRCView the HMRC connection status and client MTD authorisations
Manage HMRCConnect or disconnect HMRC, and create MTD authorisation invitations

Advisory​

PermissionWhat it allows
View advisorySee client attention signals, the Advisory view, and note history
Action advisory itemsSnooze or dismiss attention items, and draft advisory notes to clients
Manage advisory settingsChange the firm's attention thresholds, enabled signals, and note tone

Audit & Reports​

PermissionWhat it allows
View Audit LogsAccess system audit logs
View ReportsAccess organisation reports

Security​

PermissionWhat it allows
Reset MFAReset multi-factor authentication for other team members

Customising Permissions​

You can add or remove individual permissions for a team member on a specific branch. For example, you might remove Manage Billing from an Admin, or grant Invite Team Members to a Member who helps with onboarding.

  1. Go to Team Management > Team Members
  2. Select the team member
  3. In Branch Access, select the three dots next to the branch, then select Permissions
  4. In Manage Permissions, select a category on the left, or search for a permission
  5. Turn individual permissions on or off
  6. Select Save Changes

Permissions marked From Role come with the team member's branch role. The Save Changes button shows how many changes you've made. To return the team member to their role's default permissions, select Reset. To close without saving, select Cancel.

Permission changes are recorded in the audit log.

tip

To find out which permission an action needs, hover over its button. Atlas shows a tooltip naming the required permission when you don't have access.