How do I grant KSeF permissions to an accounting office?

The National e-Invoice System (KSEF) requires the issuance of structured invoices. However, most companies do not intend to do this themselves. Instead, entrepreneurs are exploring how to grant KSeF authorizations to an accounting firm that will issue invoices in the system on their behalf.
Table of contents:

Who is affected by the National e-Invoicing System?


  • For taxpayers whose sales in 2024 exceeded PLN 200 million,
  • For other taxpayers, unless their sales value for monthly periods does not exceed the amount of PLN 10,000 gross.

Important!

Types of permissions in KSeF. How to manage permissions?


Key in this regard are:

  • KSeF entitlement definition,
  • types of authorizations to use the National e-Invoicing System,
  • Ways of granting and revoking rights.

According to §3.1 of the aforementioned document, the rights to use the National e-Invoicing System are the rights to:

  1. To grant and revoke rights to use the KSeF,
  2. Issuing and accessing structured invoices and electronic invoices (issued during the period of KSeF failure and during the period of KSeF unavailability),
  3. issuance of invoices by the buyer of goods or services
  4. Issue VAT RR invoices and VAT RR CORRECT invoices in KSeF.

Some of the powers mentioned above – to grant and revoke authorizations to use KSeF and to issue and access structured and electronic invoices – are held by:

  • taxpayer,
  • entities referred to in Article 106c of the VAT Law, viz:
    • Enforcement authorities during administrative enforcement proceedings,
    • court bailiffs performing enforcement activities as defined in the Code of Civil Procedure),
  • an individual designated by the taxpayer (and also by representatives of the taxpayer’s internal units, local government units or VAT groups)
  • an individual designated by an individual with the authority to grant and revoke KSeF,
  • a non-individual entity designated by the taxpayer – most often an accounting office,
  • an individual designated by an entity designated by the taxpayer (e.g., a specific employee of the accounting office, who was previously given the appropriate authority by the taxpayer).

Important!

  • manage permissions,
  • issue invoices,
  • view issued invoices.

How do I grant or revoke access to KseF?


Currently, granting and editing permissions to use the National e-Invoice System is possible in two ways.

Electronically – a taxpayer or authorized person can use the KSeF Taxpayer Application or software integrated with KSeF to grant, change or revoke authorizations to a designated person.

In the traditional form – the taxpayer or person of entitlement can submit notices of granting or revoking KSeF entitlement to the competent head of the tax office. To do this, use the ZAW-FA form, fill it out and submit it to the office. However, this form is provided only for taxpayers and entities that are not individuals and do not have the ability to authenticate with a qualified electronic seal.

Granting rights to KSeF through the Taxpayer Application.

How do you grant KSeF permissions to an accounting office or employee? Follow these few steps:

  • Visit the KSeF Taxpayer Application page.
  • Log in using one of the available methods:
    • trusted profile,
    • mCitizen application,
    • e-Evidence,
    • electronic banking,
    • qualified signature,
    • e-stamp.
  • In the Taxpayer Application, select the Entitlements module.
  • Fill out the authorization form:
    • Select the type of entity or entity first,
    • Complete the data of the authorized entity (TIN or PESEL, first and last name).

In this way, you can give permissions to KSeF:

  • subjects of the current context,
  • To subordinate units identified by an internal identifier,
  • Subordinate entities identified by the TIN,
  • EU entities entitled to self-invoicing identified by an EU VAT number.

Important!

  • birth dates,
  • type of identity document,
  • The number and series of the aforementioned document,
  • country of issuance of the document,
  • certificate fingerprint.

How do I grant KSeF privileges to an accounting office?


Example:

Just a few weeks before the System was implemented in the company, Mr. Ireneusz decided to empower the accounting office with which his company has been working for many years.

Example:

An idea worth considering is to empower not one, but at least two people – this way, in the event of illness or vacation of a designated accounting office employee, the other will be able to issue invoices on behalf of the company, ensuring continuity of service.

Keep in mind, however, that each additional person given access to KSeF is not without impact on your company’s security. This, plus the continuous access to the KSeF Taxpayer Application, means that you might as well give privileges to one person, and only extend them to another if necessary.

Entitlements to KSeF: how to receive them?


One of the most important functions in the context of permissions is the ability to revoke them. This is primarily about maintaining control and security within the company.

In what situations should privileges be revoked?

  • When a KSeF-eligible employee leaves or is dismissed from the company.
  • When an accounting office employee authorized to use KSeF changes jobs.
  • When you end cooperation with an accounting office. At that time, remember not only to revoke the authorizations for the entity, but also for all the employees of the office who were previously given authorizations.
  • When an employee who used to invoice is transferred to another department and will no longer actively use KSeF.

What are the mistakes to beware of?

A popular mistake is leaving privileges to people who no longer need them. This compromises the company’s security – not least because of the possible detriment to the company of a person who still has privileges (even though he shouldn’t have them).

This can also make a difference when a company is trying to figure out where specific movements in KSeF came from. The more people who are authorized to invoice, the more time it will take to verify.

Remember, too, that permissions regarding access to invoices are also important. Those with such access can view and download invoices, and thus know about all transactions your company makes.

Summary



This is worth knowing about: