I do not have permission to view, use or change a vault credential

Symptom

When you open or save a vault credential (the password of a portal, a bank or an AI provider), give a permission or start the vault, an Access Error or Invalid Operation window opens and nothing is shown or saved.

Message

Copied from the screen, with the Fiscal administration profile, in Accounting › Configure › Credentials vault.

• In Credentials › New, without the View permission:

  “You do not have permission to see these credentials. Ask to be given “View” for this company and portal in the credentials vault. Who gives it: a Fiscal administration user who already has the “Edit” permission in the vault, in Accounting › Configure › Credentials vault › Permissions. If nobody has “Edit” yet in this company, a Fiscal administration user starts the vault in Accounting › Configure › Credentials vault › Start the vault.”

• When saving a credential with View but without Edit: “You do not have permission to create, change or delete these credentials. Ask to be given “Edit” for this company and portal in the credentials vault.”, followed by the same “Who gives it: …” sentence.

• In Permissions, when saving a line without having Edit in that company:

  “Only who has “Edit” in the credentials vault of company Empresa Nova Exemplo, Lda can give, change or remove permissions. Ask one of them. Who gives it: …”

• In Permissions, when saving a line with your own name:

  “You cannot give yourself, change or remove your own access to the credentials vault. Ask another fiscal administrator to do it.”

• In Start the vault › Confirm, when someone in the company already has Edit (Invalid Operation window):

  “The vault of company Empresa Nova Exemplo, Lda is already started: Administração fiscal A (exemplo) can give permissions. Ask one of them. Who gives it: …”

Verified causes

• Each company's vault starts with no access. The Permissions screen says so when it is empty: “Nobody has access to the credentials vault yet. Choose who may see or edit the credentials of each company and portal. Without a line, a user sees nothing. You cannot change your own access.” Even with the Fiscal administration profile, nobody sees credentials without a line for themselves.
• In a new company, the first step is to start the vault. Only Fiscal administration does it, once per company, and receives Edit on all portals. The system administrator does not have the Permissions or Start the vault menus.
• Three levels. None does not see the credentials; View sees them and reveals the password; Edit also creates, changes and deletes credentials and gives permissions. For View and Edit, the Warning column says “Can read the passwords in clear text. Recorded in the audit log.”.
• Each line is per company and portal. An empty Portal applies to all portals; choosing a portal limits the line to that portal.
• Only those with Edit give permissions, and having the Fiscal administration profile is not enough.
• Nobody changes their own access, not even whoever started the vault: it must be another person with Edit in the same company.
• The Accountant does not have the Credentials vault menu, even with the View permission.

What to check

1. The company chosen in the top right corner is the credential's company.
2. Whether there is a line for you in Permissions, with the right company and portal and the level the task needs: View to see and reveal, Edit to save or give permissions.
3. Whether someone in the company already has Edit. The “already started” message says who.

How to fix it

1. Nobody in the company has Edit: a user with Fiscal administration opens Accounting › Configure › Credentials vault › Start the vault and clicks Confirm (see How to store portal passwords in the credentials vault, steps 1 and 2).
2. Someone already has Edit: ask them to open Permissions, click New, choose the User, the Company, the Portal (empty for all) and the Level, and click Save.
3. You do not have the Fiscal administration profile and need it: the system administrator gives it in Settings › Users & Companies › Users, the person's record, Advanced settings tab, PT Localization — Invoicing, accounting and tax levels field (see Profiles and permissions).
4. Reopen the screen where you had the error.

Give Edit only to those who enter or change credentials: with Edit you can also read the passwords, and every reading is logged. To remove access, someone with Edit deletes the line in Permissions.

Who does it: a user with Fiscal administration and Edit in the company; in a new company, whoever starts the vault.

Expected result

The line appears in Permissions, the error window no longer appears for that company and portal, and the change is logged in Audit › Records › Access log as Vault: permission changed.

When to contact support

• You have a line with the right level, company and portal, and the message persists.
• The only person with Edit in the company can no longer give permissions and the vault cannot be started again.

Information to send

Follow How to ask support for help and what information to send, with the company, the portal, your profile and the full message. Never send the credential's password.