Overview
The level of access a client user has to an engagement depends on their user role along with any additional permissions that have been granted.
This article covers client user engagement access. For information on firm user engagement access, see here.
Engagement access by feature
The default level of access a user has to engagement data is determined by their user role, which you can read about here. See the table below for information about the default access level for each user role, and where additional customization is available via permissions settings.
| Role: Client Admin | Role: Client Member |
Engagements | Can be added to the engagement team on any engagements for their company. | Cannot be added to the engagement team. Can only access engagements where they have been assigned a request. |
Sheets | No access by default. See note [1]. | No access by default. See note [1]. |
Forms | No access by default. See note [1]. | No access by default. See note [1]. |
Requests | Can access and re-assign all requests in an engagement they are a member of, except hidden requests | Can access and re-assign requests they are set as owner of, except hidden requests |
Documents | No access by default. See note [1]. | No access by default. See note [1]. |
Reports | No access by default. See note [1]. | No access by default. See note [1]. |
Comments | Can view and add | Can view and add |
Tasks | Can view, edit, and reassign any tasks assigned to any client user | Can view and edit any tasks assigned to them |
[1]: Firm can set access permission on individual sheets, forms, documents, and requests.
Add a user to an engagement
Add a client admin
Navigate to the settings menu of the engagement
Open the Access tab
Click the ➕ button to add a user to the engagement team
Add a client member
Client members cannot be added to the engagement team, and can only access requests that are assigned to them. To add a client member to an engagement, set them as an owner of at least one request in the engagement.
Remove a user from an engagement
Remove a client admin
Open the Access tab in the engagement’s settings, then click the ⛔️ symbol next to the name of the user you want to remove.
Removing a client admin from an engagement doesn’t remove them from any requests they have been set as owner of. To remove a user from requests, you can use the bulk-edit menu in the Requests tab and deselect them as owner.
Remove a client member
Remove the user from any requests they are set as owner of. You can use the bulk-edit menu in the Requests tab and deselect them as owner.
Custom engagement permissions
By default, client users don’t have access to sheets, forms, or documents. Continue reading for instructions on customizing client access to these features.
Sheet permissions
By default, sheets are not visible to client users. Sheet access is determined by the sheet permissions set by the firm.
Permission must first be set in the sheet’s settings. This will give clients access to the following columns by default (if they exist on the sheet): Key, Control Activity, Control Key, Control Owners, Control Implementation Status, Tasks, and Requests.
If there are other columns you’d like to grant clients access to, you’ll need to modify the permissions in the column settings.
To give clients access to a sheet:
Click the pencil icon to open the sheet settings
Select the permissions option based on the access level you would like to grant to clients
To give clients access to a specific column:
Click the pencil icon to open the column settings
Select the permissions option based on the access level you would like to grant to clients
Form permissions
Form access is determined by form permissions set by the firm. By default, forms are not visible to client users.
To give clients access to a form:
Click the pencil icon located at the top of the form
Select the desired access level from the Client Permissions options and click Update Form
Here are the form permissions options you can choose from:
Permission type | Definition |
No client access | Clients cannot view or edit form fields |
Clients can view | Clients can view form |
Clients can edit with track changes | Clients can view and edit form fields. Edits will not be saved until approved by a firm user. |
Clients can edit | Clients can view and edit form fields |
Request permissions
Client users' access to requests can be set using the client visibility dropdown. The visibility options are:
Clients can view: The request can be viewed by any client admins and owners of the request.
Only owners can view: The request can be viewed only by owners of the request.
No client access: The request is not visible to any client users.
Make request keys visible to clients
A request's keys show which sheet rows a request is mapped to. In order for clients to see these keys, client view/edit permissions must be enabled on the sheet(s) the requests are mapped to. Follow the instructions here to set sheet permissions and learn more about the permission options.
Document permissions
Client users' access to files in your Documents can be set using the client visibility dropdown. The visibility options are:
Clients can view: Clients can view the document and add comments and tasks.
No client access: Clients can't view the document.
Clients can see the name(s) of any parent folders containing a document they have access to.
Report permissions
See here: Configure client report permissions.