2 min read
Overview
Getting roles right is the heart of good access control. Give too much and you widen the risk if a login is compromised; give too little and people can't do their job. The fix is to think about what the person actually needs to do day to day, and match the role to that.
What to do
- Bookkeeper / accountant reconciling statements: Viewer.
- Finance manager making payments and managing the facility: Finance user.
- Director or account owner: Administrator (keep two).
You can always raise access later if a role grows. See roles and permissions and least privilege.
Related reading
Managing user roles and permissions
Roles let you give each colleague the right level of access: some can only view, some can transact, one is…
Read →
Adding a user to your account
Give a colleague their own login rather than sharing yours. Inviting a user takes a minute, lets you set…
Read →
Least privilege
Least privilege is the principle of granting each person the minimum access required for their role — no…
Read →Giving your accountant or bookkeeper access
Let your accountant help without handing over your login. Add them as their own user with view-only access,…
Read →Funding for UK limited companies
Credit Corp lends to your company, not to you personally — short-term working capital with no personal guarantee. See what your business could access.