Skip to content

Roles & permissions

KanzleiSynchron has three roles that are assigned to a client (Mandant). They are granted when you invite someone under Settings → Team (/settings/team). This page explains what each role can — and cannot — do.

Role (key)Display nameWho this is
reviewerStaff (Sachbearbeiter)Firm employees who do the daily work: import, reconcile, resolve exceptions.
merchant_adminFirm Admin (Kanzlei-Admin)The person who sets up the client, manages the team, and maintains settings. Owner of a client.
internal_opsInternal OperatorKS internal operators with cross-tenant visibility. Assigned at invite time.
Taskreviewer (Staff)merchant_admin (Firm Admin)internal_ops (Internal Operator)
Upload imports
Reconcile & resolve exceptions
View reports
Create & close a period
Build & send the handoff pack
Manage the team (invite, suspend, change roles)
Change client settings
Configure the tax-advisor channel
Trigger data erasure (GDPR)
Cross-tenant visibility

Why two people are needed for the four-eyes close

Section titled “Why two people are needed for the four-eyes close”

Closing a period follows the four-eyes principle. The close wizard checks three gates before it closes a period:

  1. Zero open exceptions in the period.
  2. ≥ 95 % match coverage of movements.
  3. Four-eyes principle: whoever closes the period must not have created it (creator ≠ closer).

The third gate cannot be bypassed. It is role-independent: even two reviewers satisfy it, as long as they are two different people. A single team member — even a merchant_admincannot close a period they created themselves.