QuickBooks Online user roles: access limits, admins, and the mobile app gap
A community answer explains QuickBooks Online user roles, who can change them, why some roles cannot use the mobile app, and where to edit access.
Community threads on QuickBooks Online access rights keep landing on the same frictions. A teammate cannot use the phone app. An admin cannot hand over the top job. A formally accepted answer from Intuit lays out the role model behind both, and the details matter more than the role names suggest.
One seat, one role
Every email address on a QuickBooks Online plan holds exactly one role. That role decides what the person can see and do in the company’s books. One person cannot stack two roles on a single login, so a colleague who needs more reach needs a different role, not a second seat.
The subscription, not the role list, sets how many people can occupy the billable roles. When adding someone keeps failing, the plan’s seat allowance is the first thing to check.
Can a company admin take over as primary admin?
No. The first person to create the account becomes the primary admin, and that role can name others as company admins. Two limits apply here, and both bite in practice. A company admin cannot change or reassign the primary admin role, and only admins can add, edit, or remove admins.
Editing the company’s own record is narrower still. Only the primary admin can change company details on the Company tab, reached through the gear icon under Account and settings. A company admin manages people. The primary admin manages the firm.
Standard full access does most of the work
Standard full access is the workhorse role. It covers everything involving customers, sales, vendors, and purchases, then reaches further. Holders can add or remove employees, change preferences, and view the audit log. They can work the account list, review and categorize bank feeds, move money between accounts, reconcile, and post journal entries. Every report is open to them, along with sales tax data and multicurrency.
The vendor’s documentation adds one note for accounting practices. In QuickBooks Online Accountant, this same standard role can go to an outside reviewer, such as an external accountant, who then reaches client companies on the Advanced tier.
The internal accountant, minus payroll
Internal accountant carries the same broad toolkit with a few edges. The vendor’s list gives it one power the standard role does not show: undoing completed reconciliations. It also sees every report except payroll reports.
Two doors stay shut. It cannot run payroll, and it cannot manage other users’ roles.
Why does the mobile app reject some users?
Because it was built for two kinds of user. The QuickBooks mobile app supports the admin roles and standard full access, and no others. Anyone holding a different role, internal accountant included, must work in a web browser instead.
This detail sits behind a familiar report. A new user opens the app, signs in with a valid invite, and cannot reach a working view of the books. The answer is not a password reset or a reinstall. For those roles, the browser is the only door, by design.
Admins and standard holders give up nothing by staying in the app. Everyone else should plan on a desktop or laptop browser for day-to-day work.
Where do you change someone’s role?
In the browser, as an admin. Select the gear icon and open the user management screen, listed as Manage users. From there an admin can invite a person by email address, choose a role, or edit that choice later.
The guardrails above still apply. Only admins touch admin roles, and only the primary admin edits the Company tab. If the change you want concerns the top job itself, the primary admin has to perform it, since a company admin cannot promote a successor.
None of this signals a fault in the company file. It is the permission model working as shipped, and the accepted solution rests on exactly that reading. Knowing which role holds which key resolves the sign-in complaint and the handover complaint alike.