I have users that can both make changes and run reports. How do I change it so that they can only run reports?

You can edit your users' role so they can only run reports, Dean. Allow me to guide you through the process below.

If you're using QuickBooks Online Essential or Plus, the closest role you can assign is the View company reports. However, they can still change and customize reports.

On the other hand, if you have the QuickBooks Online Advanced subscription, you can utilize the custom role feature. This will allow you to manage user access efficiently by granting users permissions specific to their roles.

First, you'll need to create a custom role and assign it to the user. Here's how:

1. Navigate to the Gear icon, then Manage users.
2. Go to the Roles tab, then select Add role.
3. Enter a Role name and Role description.
4. Choose what the user role can access, then hit Save Role.

Once done, you can edit the user's role and assign the custom role you created. Here are the steps:

1. Go to the Gear icon, then Manage users.
2. Click the Users tab, then find the user you want to edit.
3. From the Action column, select Edit 
4. Under Roles, click the dropdown and choose the custom role you created.
5. Hit Save changes.
   

Moreover, you can check all your financial balances and business standing by running financial reports. It would also help you review if your books are accurate.

If you're using QuickBooks Online Essentials or Plus, Consider upgrading to QuickBooks Advanced today to access the custom roles feature. This upgrade will enable greater flexibility and control over user access, enhancing the management of your QuickBooks environment.

Implementing these roles can significantly streamline your operations, enhancing both security and efficiency within your organization. If you have any further questions or require additional assistance with managing user roles, please don't hesitate to reach out.