Access Control
A solo preparer, a reviewer, a billing coordinator, and a client all need different views into the same firm — TPP's role model is built around that reality.
Not everyone at a firm needs to see everything. TPP assigns every staff member one of six roles — Owner, Admin, Preparer, Reviewer, Billing, or Read Only — each with a defined, real access level, and gives every client portal login access to only their own information.
The roles and access levels below are TPP's actual role model, from Firm Management → Staff & Roles — not a simplified example.
Interactive
Owner
Full access to every client, return, and firm setting, including billing and staff management.
All permissions
| Area | Owner | Admin | Preparer | Reviewer | Billing | Read Only | Client |
|---|---|---|---|---|---|---|---|
| Client Records | Full | Full | Assigned Only | Assigned Only | None | View Only | Own Only |
| Documents | Full | Full | Assigned Only | View Only | None | View Only | Own Only |
| Tasks | Full | Full | Assigned Only | Approve Only | None | View Only | Own Only |
| Firm Settings | Full | Limited | None | None | None | None | None |
| Billing | Full | Limited | None | None | Full | None | Pay Only |
| Calendar | Full | Full | Assigned Only | View Only | None | View Only | Own Only |
| Communications | Full | Full | Assigned Only | View Only | None | None | Own Only |
| Tax Returns | Full | Full | Assigned Only | Approve Only | None | View Only | Own Only |
| Reports | Full | Full | None | None | Limited | View Only | None |
Access levels are summarized from each role's description in Firm Management → Staff & Roles. Hover a badge with a note for detail.
What this covers
Current status
Every staff member is assigned one of six roles, each with a defined access level, from full firm access down to view-only.
A client portal login can only ever see that client's own documents, messages, tasks, and appointments.
Explore other security topics
Tax returns, W-2s, bank statements, and Social Security numbers deserve the same care whether they're moving between a client and TPP, or sitting in storage.
Learn more →Password, plus a second verification factor, equals meaningfully stronger protection against a stolen or guessed password alone.
Learn more →Every upload, view, and status change tells part of the story of a client's engagement — and part of the story of who accessed their sensitive information.
Learn more →30-day free trial. Full access to every feature during your trial, subject to the applicable trial terms.