QuickBooks and Xero White-Label Setup for CPA Firms

Invite one firm, then assign your team

The most common leak is also the easiest to avoid: the client invites the production vendor as a second accounting firm.

In QuickBooks Online, a primary or company admin invites an accountant from Settings, then Manage users, then the Accountants or Accounting Firms tab, then Invite firm. Intuit's guide to inviting accountant users makes two points that matter here. An accountant invited this way does not count toward the client's subscription user limit. Intuit also notes that companies which need more than two accountant firms should consider QuickBooks Online Advanced — a warning not to park a production vendor next to your firm in Manage users.

Instead, the client invites your CPA firm once. Your firm accepts in Intuit Accountant Suite, then adds the named people who will do the work from All Apps, then Team, then Users, assigning each person a firm role and a client-access role, as Intuit describes in its guide to adding and managing your accounting team. Production staff work through your firm's suite, not as a second invite from the client's Manage users screen.

Xero uses the same idea with different labels. A client with an existing organisation invites your practice from Settings, then Users, then Invite a user. Once you are in, link that organisation to the client record in Xero HQ so staff permissions can be managed at practice level. Allocate named staff in Xero Partner Hub, rather than asking the client to keep inviting individual vendor addresses.

Every person who touches the file should have their own login. Do not share a partner's password or a generic bookkeeper address that several people use. Xero's guidance is to give each person their own account and to set up multi-factor authentication. Intuit documents MFA as a required protection when a sign-in looks unfamiliar, with optional two-step verification for every login. Make both a condition of access.

Choose roles that can close the books

A white-label file needs two kinds of access: production access for the people preparing the close, and review access for the person at your firm who signs off. "Accountant" or "Advisor" as a shorthand is not enough.

In QuickBooks Online, start with Intuit's user roles and access rights. The Bookkeeper role can enter invoices, bills, and bank transactions, but it cannot view the profit and loss, balance sheet, or cash flow — the wrong role for someone who is supposed to close the month. The In-house accountant role can categorise bank feeds, reconcile, post journal entries, undo completed reconciliations, and view reports other than payroll reports, but it cannot run payroll, manage other roles, or perform admin tasks. For many production seats, that is a better default than Company admin. Company admin can change people's permissions and should stay with your reviewer and whoever provisions access. Production staff should not invite users or change company settings.

Intuit Accountant Suite also lets you assign Standard all access (can't pay bills) when someone should review a company but not pay bills, and custom roles on the suite and on QuickBooks Online Advanced. Use a custom role when you want bookkeeping and reports without payroll or user management. Books Close access defaults to primary and company admins; extend it to your reviewer, and let production complete assigned close tasks without becoming a company admin.

On Xero, current documentation uses the Administrator role for full access. Older materials still say Advisor or Adviser. Keep Xero's comparison of user role access to settings open while you provision a file. Administrator can add and remove users, edit organisation and financial settings, set lock dates, edit invoice branding, manage connected apps, maintain the chart of accounts, and use find and recode. Only an administrator can set or remove a lock date. Standard can do day-to-day work and access many settings, but it cannot set lock dates; user-management and connected-apps permissions are optional. Billing stays with the subscriber.

If production must post adjusting journals, recode transactions, and lock a period, they need the Administrator role, or your reviewer performs those last steps. Keep the final lock as a reviewer duty, and do not treat production as the subscriber. The same idea applies if you use outsourced bookkeeping companies for CPA firms as the production layer: the vendor's people are named users under your practice access, not a second brand in the client's user list.

Keep every client-facing message under your brand

White-label work fails in small, visible places: an invoice with the wrong logo, a report email from a vendor domain, or a receipt request from a name the client does not know.

Invoice and form branding belong to the client, or to your firm when you are sending a report pack — never to the production vendor. In QuickBooks Online, logo, colours, and the accompanying email are edited in custom form styles. In Xero, administrator and standard users can edit invoice branding and email settings. Review those templates in the first week, before the first invoice or reminder goes out.

Questions and documents should travel through the practice tools the client already treats as yours. In Intuit Accountant Suite, Books Close includes a Send Financials step that opens Management Reports so the pack can be reviewed or shared from the file. On Xero, Xero Ask in Partner Hub is a secure way to request information or documents; clients use a secure login to reply, whether or not they are Xero users. The provider does not email the client from its own domain; queries come to your reviewer, and your firm speaks to the client.

Run review in the file, not in a side spreadsheet

Once access is clean, monthly review should happen where the work already lives. For QuickBooks Online, Intuit Accountant Suite's Books Close is the current firm-level workflow. Intuit's File Review walkthrough organises the close into sections you can standardise with a template.

Pre-Close is customisable — bank feeds connected, documents received, payroll journals posted if they are in scope. Account Reconciliation lists bank and credit card accounts for the period; production should finish reconciliations here, not in a private worksheet. Transaction Review runs checks on the file. Intuit's transaction review article, updated in November 2026, lists the available checks: uncategorised transactions, uncleared transactions older than 30 days by default, unapplied customer or vendor payments, expenses and bills above a threshold with no attachment, and transactions auto-posted by bank rules. Those last two matter in a white-label file: a bank rule that has never been reviewed will keep posting the same wrong category, and missing attachments should be a client request, not a guess.

Payee and entity review flags new vendors, customers, and accounts, and includes W-9 and 1099 management. Final Review surfaces the profit and loss and balance sheet — the reviewer's section. Additional Items holds firm-specific tasks, including partner sign-off. Send Financials opens Management Reports so the pack leaves from QuickBooks under the client's or the firm's template, not from a vendor email.

You can copy a standard Books Close template, assign a preparer and a reviewer, and set a default so new clients start from the same structure. Settings, assignees, checks, and thresholds carry forward into the next period. DNA Growth's note on white-label month-end close and reporting covers the cadence and the pack. The offshore bookkeeping setup kit is the checklist to run before the first close.

Xero does not copy Books Close feature for feature, but the discipline is the same. Reconcile in the organisation, leave explanations in History and Notes, use practice report templates so every pack looks like your firm, and build bank rules in the organisation, where your firm can see them.

Hand off, lock the period, then send the pack

The last step is the one firms skip when they are busy, and it is the one that protects the reviewer's sign-off. Production marks the close ready for review. Your reviewer works the Final Review, answers or returns comments, and only then locks the period.

In QuickBooks Online, lock the books from Settings, then Account and settings, then the Advanced tab, then Accounting. Turn on Close the books, enter a closing date, and choose the security option. Intuit gives you two: allow changes after a warning, or allow changes only after a warning and a password. For a multi-user file, the password option is the one that makes the handoff real. Only a primary admin or company admin should hold that password.

In Xero, an administrator sets the lock date under Accounting settings, then Financial settings. After a lock date is set, users cannot add or edit transactions dated on or before that date, although they can still create and submit drafts. You can apply the lock to all user roles, or to all roles except administrator. After partner sign-off, locking all roles, including administrator, is the tighter choice; an administrator can remove the lock temporarily if a genuine adjustment is needed, then put it back.

Then send the pack through the branded channel you already set — Management Reports in QuickBooks, or your Xero report template — and tell the client who to reply to at your firm. The close is finished when the period is locked and the pack has left under your name.

If you are still packaging the offer, use the playbook on how to resell bookkeeping under your CPA firm's brand. If clients are already waiting, DNA Growth can run CPA firm outsourcing production, including offshore bookkeeping in QuickBooks Online or Xero, with your reviewer still on the file.