Understanding roles and permissions

In SynkriaOps, every user has a role that precisely defines what they can see and do within the tenant. This system is built on the principle of least privilege: each collaborator only accesses the features necessary for their work, and nothing more.

Understanding roles before inviting your team will prevent surprises — such as giving someone access to security settings when they don’t need them.

The three available roles

SynkriaOps offers three cumulative roles, ordered by scope of access.

ADMIN — full access

The ADMIN has access to the entire application, without restriction. This is the only role capable of:

Managing users (invite, modify, deactivate)
Modifying VAT settings, accounting journals and the chart of accounts
Creating, closing and reopening a fiscal year (irreversible action requiring a reason of ≥ 10 characters)
Deleting data (archived counterparties, cancelled quotes)
Configuring the tenant’s security and connection settings

Typical use cases: business owner or managing partner, Chief Financial Officer (CFO), head accountant responsible for settings.

ACCOUNTANT — data entry and exports

The ACCOUNTANT can perform all routine bookkeeping operations, without accessing sensitive settings.

They can:

Create, modify (before validation) and validate accounting vouchers
Perform reconciliation on counterparty accounts
View and export the general ledger, trial balance and all financial statements
Export the FEC for tax audit purposes
Manage counterparties (clients and suppliers), quotes and customer invoices
Import Mobile Money statements and reconcile bank transactions

They cannot:

Modify VAT settings, journals or the chart of accounts
Invite or deactivate users
Close or reopen a fiscal year

Typical use cases: in-house accountant, external accounting firm accountant, payroll manager.

VIEWER — read only

The VIEWER sees everything but modifies nothing. They can navigate all financial statements, the general ledger and trial balance, without any risk of touching data.

They can:

View the dashboard and all its KPIs
Browse the general ledger, trial balance and journals in read mode
Consult quotes, invoices and financial statements
Download PDFs of previously generated documents

They cannot:

Create, modify or validate any accounting voucher
Export the FEC or regulatory exports
Access settings

Typical use cases: General Director monitoring KPIs, minority partner with right of oversight, statutory auditor during review phase, investor.

Full permissions matrix

Action	ADMIN	ACCOUNTANT	VIEWER
Accounting
Create/modify accounting vouchers	✓	✓	—
Validate accounting vouchers	✓	✓	—
Reverse a validated voucher	✓	✓	—
Perform reconciliation	✓	✓	—
View general ledger / trial balance	✓	✓	✓
Browse chart of accounts	✓	✓	✓
Modify chart of accounts	✓	—	—
Sales
Create quotes and customer invoices	✓	✓	—
View quotes and invoices	✓	✓	✓
Send payment reminders	✓	✓	—
Purchases & expenses
Record a supplier invoice	✓	✓	—
Submit an expense report	✓	✓	—
Banking & treasury
Import Mobile Money statements	✓	✓	—
Reconcile bank transactions	✓	✓	—
View cash flow forecast	✓	✓	✓
Counterparties & products
Manage clients and suppliers	✓	✓	—
View counterparties	✓	✓	✓
Exports & reports
Export FEC	✓	✓	—
Export financial statements to Excel	✓	✓	—
View financial statements	✓	✓	✓
Settings
Invite / manage users	✓	—	—
Modify VAT rates	✓	—	—
Configure accounting journals	✓	—	—
Create a fiscal year	✓	—	—
Close or reopen a fiscal year	✓	—	—
Configure tenant security	✓	—	—

Frequently asked questions about roles

Can my accountant close a fiscal year? No. Fiscal year closing is reserved for the ADMIN role. It triggers the profit calculation, an entry to account 12 (Net income for the year), and permanently locks all entries. This is an irreversible operation requiring explicit confirmation. See Closing a fiscal year.

Can my accountant modify the VAT rate? No. VAT settings are reserved for the ADMIN. An incorrect VAT rate would affect all invoices generated after the change — the restriction is intentional.

Can a VIEWER download the FEC? No. FEC export is restricted to ADMIN and ACCOUNTANT roles, as it contains all accounting data in a structured format intended for tax authorities. A VIEWER can consult financial statements in read mode within the interface.

Can I create a custom role? Currently, SynkriaOps provides the three standard roles. If you have a specific unmet need, contact support@synkriaops.com.

Special case: cabinet mode and the EXPERT role

If your tenant is managed through an accounting firm in multi-tenant mode, a fourth profile exists: the EXPERT role. This role is assigned to the firm’s chartered accountants intervening on your books.

The EXPERT role has the same rights as an ACCOUNTANT for routine operations, but with additional restrictions on certain sensitive actions (counterparty deletion, retroactive label modification, access to banking data outside accounting scope). These restrictions are configured by the firm, not by the client company.

For more details, see Chartered accountant rights in cabinet mode.

Changing an existing role

Did you assign the wrong role to a collaborator? No worries — the change is instant:

Go to Settings → Users.
Click the name of the relevant user.
In the side panel, click “Change role”.
Select the new role.
Click “Save”.

The change is effective immediately — the user does not need to log out.