Skip to main content
Table of Contents

METRC Permissions

What are Metrc Permissions? Metrc permissions control what a user can access and do within Metrc. These permissions are assigned to each user profile (and can vary by facility) and determine whether…

Jason Narney
Updated by Jason Narney

What are Metrc Permissions?

Metrc permissions control what a user can access and do within Metrc. These permissions are assigned to each user profile (and can vary by facility) and determine whether the user can view information or manage actions like creating, updating, receiving, or voiding activity in Metrc.

To ensure Flourish can successfully sync data with Metrc, the Metrc user profile that generates the API key must have sufficient permissions that align with their Flourish User Role. Metrc enforces permissions at the API level, meaning Flourish can only perform actions that the associated Metrc user is authorized to manage.

Who needs which Metrc permissions?

How to view and manage an existing user’s permissions in Metrc
Only a Metrc administrator with Manage access to Employees can update user permissions.
  1. Log in to Metrc using an administrative account.
  2. From the top navigation bar, go to Admin > Employees.
  3. Locate the employee record.
  4. Select the employee record and click Edit Employee.
  5. Review the permissions listed for each functional area.
    Each permission includes two access levels:
    • View — read-only access
    • Manage — full create, edit, submit, receive, adjust, and void access
  6. Click Save Employee if you make any changes

Changes take effect immediately, and a new API key is not required as long as the same Metrc user profile remains in use.

Reverse Sync User permissions requirement

The Reverse Sync User is the Metrc user whose API key Flourish uses at the facility-level sync to keep data aligned between systems. This user must have complete “Manage” permissions across their Metrc profile to prevent unauthorized errors and failed sync activity.

All other Metrc users can have their user role-based permissions tailored to match their job responsibilities and their user role access in Flourish. Click here to learn more about Flourish User Roles.

To learn how to configure the Reverse Sync User in Flourish, see: Configure and Manage a Reverse Sync User

Important: API Keys are tied to user permissions
Your Metrc API key inherits all permissions from the user profile that generated it. If the Reverse Sync User’s permissions are incomplete, you may see authorization errors or missing/incomplete sync results.
We recommend that the Admin user generating the API key for the facility-level reverse sync has full “Manage” access for all permissions to ensure your license integration sync works smoothly.

Required permissions for the Reverse Sync User

For reliable sync behavior for your facility, the Reverse Sync User must have:

  • No permissions left as “View only”
  • No unchecked permission areas
  • “Manage” selected for all available permission categories
    • Manage Packages Page
    • Manage Transfers Page
    • Manage Sales Menu
    • Manage Tag Orders
    • Manage Tags
    • Manage Strains
    • Manage Items

Metrc API Documentation

For clients utilizing the external API endpoints, the permissions required for every API call in Metrc's v2 APIs are listed here:
California METRC Web API Documentation 
Missouri METRC Web API Documentation
Michigan METRC Web API Documentation
Rhode Island METRC Web API Documentation 
Nevada METRC Web API Documentation 
New York METRC Web API Documentation 
Colorado METRC Web API Documentation 

How did we do?

Find your NYS Metrc License Number and API Key

METRC - Mothers Plants and Groups

Contact