Row-level extranet security
Partner access is enforced on every standard screen and API call, record by record — not just by role.
QBO Platform · Partner portals & access control
Bring partners into your system — and show each one only their part.
Partner portals without a separate portal: row-level and role-based access filter every screen and API call, so vendors, outside counsel, and clients see only the records they’ve been granted.
Access follows the case: when a partner is assigned to a case, they can see that case and the records beneath it — and nothing else.
What it does
Maintained automatically
Grants update themselves as partners are assigned to records, with access to a record, its children, or the whole template.
Roles and permissions
Roles map to functions and permissions, so each user sees the actions they’re allowed to take.
Single sign-on
Sign in with Microsoft, Google, or any OpenID Connect provider, plus API tokens and one-time codes.
API keys with guardrails
Keys with expiry, usage limits, IP restrictions, and lockout, with every reset logged.
Sensitive data, logged
Unmasking a Social Security number requires a specific permission and writes a security log entry. Encryption keys can live in a managed key service.
Partner CRM
Organizations and contacts with verified contact methods and professional licenses, address geocoding, and fuzzy name matching. Partners can self-register.
Extranet security in action
One account. Five people. Five different views.
Your team, your vendors, and your outside firms all work in the same system. Each one sees only the records they’ve been assigned and everything beneath them. When work is reassigned, access moves with it. No one maintains a permission list.
| Record | Your team | Field inspector | Appraiser | Collection agency | Law firm |
|---|---|---|---|---|---|
| Account 1042 | Visible | Visible | Visible | Visible | Visible |
| Inspection | Visible | Visible | Hidden | Hidden | Hidden |
| Valuation | Visible | Hidden | Visible | Hidden | Hidden |
| Collections | Visible | Hidden | Hidden | Visible | Hidden |
| Litigation | Visible | Hidden | Hidden | Hidden | Visible |
| Settlement quote | Visible | Hidden | Hidden | Hidden | Visible |
| Internal review | Visible | Hidden | Hidden | Hidden | Hidden |
Building blocks
| Extranet security | Row-level partner access, maintained automatically |
| Users, roles & sign-on | Permissions, single sign-on, API keys, and security logging |
| Contacts & organizations | People, partners, contact methods, and licenses |
Integrations
Azure Communication ServicesTelephony for contact centers working from QBO records.- Microsoft sign-inSingle sign-on with Microsoft accounts.
- Google sign-inSingle sign-on with Google accounts.
- OpenID ConnectSingle sign-on with any OpenID Connect identity provider.
AWS KMS & Secrets ManagerKeep encryption keys and secrets in AWS’s managed services.
More of the platform
- Process & Case ManagementThe case that orchestrates everything else.
- Documents to DecisionsIngest, generate, store, and act on documents.
- Workforce ManagementRoute work and exceptions to the right people.
- Data & InsightBring data in, score it, report on it.
- AIQBO orchestrates AI — under your governance.
- Architecture & APIsOne API pattern, queues, and plugins.