QuickBooks Online roles: mobile limits, admin lockouts, and forgotten seats

Permission questions keep surfacing around QuickBooks Online, and most of them trace back to one design decision: the software ties every permission to a single email address. A colleague signs in with the wrong address and half the menus are gone. A manager tries to edit the firm’s registered details and finds the fields closed. None of it is a fault. The seats are doing exactly what the plan says.

One role per address, and the plan sets the count

Every address on a QuickBooks Online subscription holds one role, and the plan decides how many billable seats the firm can assign. Hand a login to a new employee and you are really handing them the previous person’s permissions. That surprises people, because the software never presents it that way. It presents people, not seats.

Role names and a few entitlements shift between regions, so the descriptions here follow the vendor’s VAT-region plans, which serve countries such as South Africa. Firms elsewhere will see the same structure with local tax wording in place of VAT.

Which roles can open the mobile app?

Two seats, per the vendor’s current guidance: admin and standard all access. Everything else stays in the browser. An in-house accountant, an accounts receivable manager, or anyone on a narrower seat has to sign in through a phone’s browser to keep working.

This matters more than it sounds. Field staff who only have the app installed hit a wall the moment their role is not one of the two supported ones. The fix is not technical. The seat either has mobile access or it does not, and the entitlement can change between app releases, so a phone that worked last quarter proves nothing.

The primary admin is a seat of one

Only the primary admin can change the registered business details, found under the gear icon in Account and settings. A company admin cannot edit or reassign that role. Only admins can add, edit, or remove admins at all.

The practical consequence shows up after a handover. If the person who set up the subscription leaves, the business keeps trading on their details until the primary role moves. Company admins cannot start that move themselves, which catches firms that assumed admin meant all admin. Reassignment runs through the account’s admin controls, so it needs the cooperation of whoever currently holds the role.

Where each common billable role stops

Standard all access is the broad seat: customers, sales, suppliers, purchases, bank feeds, reconciliation, journal entries, budgets, the full report set, VAT data and settings, and multicurrency controls. A colleague in operations who needs day-to-day reach without admin rights sits here.

The in-house accountant seat reaches almost as far, with two sharp edges. It cannot run payroll or see payroll reports, and it cannot manage roles or perform admin tasks. One listed extra is reconciliation control: this seat can undo completed reconciliations.

The accounts receivable manager owns the sales lane: quotes, invoices, sales receipts, credit notes, refunds, statements, customer payments, timesheets for anyone, and the customer and receivables reports. It can maintain customer, product, and service records, and it gained bank deposits in May 2024. Its reach ends there; it is not an admin seat and does not replace a full bookkeeping one.

The roster is longer than the familiar four

These get the attention, but they are not the whole list. The plans also carry narrower variants of the standard seat, along with seats limited to reports or time tracking. QuickBooks Online Advanced adds custom roles that a firm can shape around its own duties. A reader comparing screens with a colleague on a different plan or tier may legitimately see a different menu, and both of them can be right.

Checks that settle most permission complaints

1. Confirm the address in use. Roles attach to email, so a personal address may hold a narrower seat than the work address.
2. Have an admin open the user list under settings and read the role against that address. Only admins can manage seats, so anyone else will find the option greyed out or absent.
3. If a feature is missing on a phone, open the company in a browser. The role may simply not be mobile-supported.
4. If the registered business details are locked, the signed-in user is not the primary admin. That holds even for company admins.

The pattern behind the complaints

None of this lands as a software fault in the end. The software enforces the seat, the seat reflects the plan, and the questions stop when the right role sits on the right address. Firms that audit their seats after a staffing change tend to stop reporting the problem at all. We will keep an eye on the threads for the rarer case: the seat is correct and the software still misbehaves, because those are the ones that say something new.