Permission sets control what each team member can see and do in Canopy, from client records to billing and firm settings.
Who can do this: Admin and Admin (No Billing) users, plus anyone whose permission set has the Team Members permission turned on.
Why this Matters
Staff, seasonal preparers and contractors rarely need the same access as a partner. Assigning the right permission set keeps sensitive client and billing data limited to the people who need it, and deactivating departed staff frees their license for your next hire before tax season.
Table of Contents
View a Permission Set
Go to Settings > Access and Permissions.
Select a permission set to open it.
Each set shows how many active and inactive users it is assigned to.
Scroll through the toggles. A green toggle means a permission is enabled; a grey toggle is not enabled.
Click Done to return to the list.
đ Canopy's preset permission sets are view-only. To build your own, see Customize Access and Permission Sets.
Assign a Permission Set to a Team Member
Go to Settings > Team Organization.
On the Users tab, click the Permission Set dropdown in line with the team member.
Select a permission set. The change saves as soon as you select it.
đ Good to know: At least one team member must keep the Admin permission set. To appear as an assignee in workflow templates, a team member also needs the matching workflow license.
Let Non-Admins Manage Permission Sets
Skip this section if only admins in your firm change team member access.
Go to Settings > Access and Permissions.
Open the custom permission set the team member uses.
Default permission sets can't be changed. Click the duplicate icon on the right-side of the permission set to copy and customize a set.
Under Settings, turn on Team Members.
To let them assign licenses too, also turn on Account Management.
Account Management is only available when Team Members is on.
Click Save.
Everyone assigned that permission set can now edit team member information and change permission sets.
Deactivate or Delete a Team Member to Free a License
When someone leaves your firm, deactivate them so you can reassign their license.
Click your Profile menu.
Select Settings.
Go to Team Organization.
Hover over the team member and click the gear icon at the end of their row.
Select Deactivate or Delete.
A deactivated team member moves to Inactive Team Members right away and can no longer log in.
đ Good to know: To bring someone back, click Inactive Team Members at the bottom of the Users tab, click the gear icon next to them and select Activate. You may need to assign their license again. For deleting and restoring, see Remove Team Members From Canopy.
Summary
Admins, and anyone whose permission set has Team Members turned on, assign permission sets in Settings > Team Organization.
Deactivate departed team members to free their license; reactivate them from Inactive Team Members.
Need help?
Contact Support or ask Penny, our AI Support Bot, for assistance.