Configure Metrc User Permissions for Flourish Sync

What are Metrc Permissions?

Metrc permissions control what a user can access and do within Metrc. These permissions are assigned to each user profile (and can vary by facility) and determine whether the user can view information or manage actions like creating, updating, receiving, or voiding activity in Metrc.

To ensure Flourish can successfully sync data with Metrc, the Metrc user profile that generates the API key must have sufficient permissions that align with their Flourish User Role. Metrc enforces permissions at the API level, meaning Flourish can only perform actions that the associated Metrc user is authorized to manage.

Who needs which Metrc permissions?

• Admin users (Reverse Sync User)
  The Admin user who sets up the Flourish account should be configured as the Reverse Sync User. This Metrc user must have complete “Manage” permissions across their Metrc profile and is responsible for system-to-system syncing.
  → Learn how to configure a Reverse Sync User
  → See here to view the Permissions Requires for the Reverse Sync User
• All other users
  All other Flourish users must generate and use their own Metrc API key from their individual Metrc profile. Their Metrc permissions should align with their assigned Flourish User Role.
  → How to generate your Metrc API key
  → How to apply your Metrc API key to your Flourish profile

How to view and manage an existing user’s permissions in Metrc

1. Log in to Metrc using an administrative account.
2. From the top navigation bar, go to Admin > Employees.
3. Locate the employee record.
4. Select the employee record and click Edit Employee.
5. Review the permissions listed for each functional area.
   Each permission includes two access levels:
   • View — read-only access
   • Manage — full create, edit, submit, receive, adjust, and void access
6. Click Save Employee if you make any changes

Changes take effect immediately, and a new API key is not required as long as the same Metrc user profile remains in use.

Reverse Sync User permissions requirement

The Reverse Sync User is the Metrc user whose API key Flourish uses at the facility-level sync to keep data aligned between systems. This user must have complete “Manage” permissions across their Metrc profile to prevent unauthorized errors and failed sync activity.

All other Metrc users can have their user role-based permissions tailored to match their job responsibilities and their user role access in Flourish. Click here to learn more about Flourish User Roles.

To learn how to configure the Reverse Sync User in Flourish, see: Configure and Manage a Reverse Sync User

Required permissions for the Reverse Sync User

For reliable sync behavior for your facility, the Reverse Sync User must have:

• No permissions left as “View only”
• No unchecked permission areas
• “Manage” selected for all available permission categories
  • Manage Packages Page
  • Manage Transfers Page
  • Manage Sales Menu
  • Manage Tag Orders
  • Manage Tags
  • Manage Strains
  • Manage Items

Metrc API Documentation