Third Party Access

You may want to allow a relative, fiduciary, or tax professional to view your tax account and manage certain aspects of the account, such as file a return on your behalf or make tax payments. To do this, you can grant third party account access using Revenue Online. If your situation changes later, you can also remove third party account access using Revenue Online.

Power of Attorney (POA)

As of January 1, 2021, the Department no longer accepts IRS Form 2848. The Department will continue to accept the Colorado Tax Information Authorization or Power of Attorney (DR 0145) form.

Requests for Copies of Tax Returns

A third party who has a Power of Attorney, that complies with the Uniform Power of Attorney Act (Title 15, Article 14, Part 7, C.R.S.), may request return copies by attaching a completed Colorado Tax Information Authorization or Power of Attorney (DR 0145) form to the Request for Copy of Tax Returns (DR 5714) form. For more information about acceptable tax information authorization, see the instructions on the Colorado Power of Attorney (DR 0145) form.

Note: To ensure tax information confidentiality, the Request for Copy of Tax Returns requires a notary signature on the paper form proving the identity of the individual making the request, even when the taxpayer (not a third party) is making the request. For more information, visit the Request Tax Return Copies web page.

Notice for Tax Professionals, Fiduciaries, and Accountants

For security reasons, individuals are limited to one Revenue Online account. Because of this, tax professionals should not create an account for themselves under a client's Social Security number (SSN) or Colorado Account Number (CAN). Doing this prevents the taxpayer from being able to create their Revenue Online account in the future. If your clients grant you third party access, you will be able to access their accounts from your own account.

Granting & Managing Third Party Access

There may be more than one person in the office or associated with the account who needs to access a business account in Revenue Online. There are two ways to allow access to your business account: add secondary logons or grant third party access. The steps for each option are listed below.

Add Secondary Logons

Adding a secondary logon is used by a business that will have more than one person managing the business account. If you choose this option, the person you are setting up for does not need to have an existing Revenue Online account. That is because adding a secondary logon is the same as creating a new Login ID and Password for Revenue Online. To add a secondary login, follow these steps:

Go to Revenue Online and log in to your account.
Select "Manage My Profile" in the upper right corner of the screen.
Select “More…”
In the “Access” box, select “Manage Secondary Logons.”
Select “Add” on the middle right of the screen.
Enter the information for the secondary logon.
- You will be asked to create a username, provide an email address, and select an access level for the person to whom you are giving access.
Select “Next” to continue to the next screen.
Select the “Security Group” and all accounts that this username will have access to, then click “Submit.”
A pop-up window will appear stating that access has been granted. The email address entered for the secondary login will receive a confirmation email containing a link for the new user to set their password and log in.

Grant Third Party Access to Employees or Tax Professionals

Before you begin, ensure you and the person you are granting access to have created an account in Revenue Online. Then follow these steps to grant third-party access to your account:

Log in to your account at Colorado.gov/RevenueOnline.
Select "Manage My Profile" at the top of the screen.
Select "More…"
Then select "Grant Third Party Access" in the "Access" box.
Select "Next" on the bottom right of the screen.
On the "New Third Party Access" screen, enter the requested information and select "Submit."
Verify third-party access was granted:
- Account Owner/Taxpayer
  - The third-party account will be filled in on the "Manage Third Party Access" page. You can see this by selecting "Manage My Profile."
  - Then select "More…"
  - Selecting "Manage Third Party Access" in the "Access" box.
- Third Party/Tax Professional
  - All the accounts are listed on the homepage of your account. The owner's account will be displayed in the account list.

Access levels for your Revenue Online Username, Secondary Logins, and Third Party Access can be managed and adjusted at any time.

Go to Revenue Online and log in to your account.
Select "Manage My Profile" in the upper right corner of the screen.
Select "More…"
On the “More…” screen, select one of the following options. These links will allow you to manage the account access for all users associated with your account. More information about each option is below.
- “Manage My Access” in the "Access" box
- “Manage Third Party Access” in the “Access” box
- “Manage Secondary Logons” in the “My Users” box
- “Manage Additional Logons” in the “Other Users” box

Manage My Access

The “Manage My Access” link will allow you to add accounts to your own access Revenue Online username. For businesses, it is recommended that you set up Revenue Online access under one account and add additional users or third party access, as needed.

Manage Third Party Access

“Manage Third Party Access” manages third party access to your accounts, and allows you to determine default access levels for third parties.

After third party access has been granted, all usernames with third party access will be listed under the “Logons” header.

Select a username listed here to view or change the access levels provided to that third party. You can cancel or grant access to any account associated with your business and determine the actions that will be available to the third party for accounts they have access to.

Manage Secondary Logons

“Manage Secondary Logons” allows you to add, view, and manage all secondary logins associated with your account. To manage existing secondary logons:

Select the username you will be managing.
The next screen will show the Access Type and all accounts the selected username has access to.
Select “Change Access” at the top of the screen to make any adjustments to the secondary login that has been selected.
Select “Save” to finalize changes.

Manage Additional Logons

“Manage Additional Logons” establishes if you will allow additional usernames to be set up in the Revenue Online portal, determines default access levels for additional logins, and allows you to view, and manage all additional login usernames associated with your account. Additional logins are username credentials that are set up through the Revenue Online portal using account information after the first username has been created.

To manage existing additional logins:

Select the username you will be managing.
The next screen will show the Access Type and all accounts the selected username has access to.
Select “Manage Access” at the top of the screen to add account access to the username that has been selected.
Select “Change Access” to make adjustments to the access level for the username.

Remove Third Party Access

Select "More…" then click "Manage Third Party Access" in the "Access" menu.
Select the blue hyperlink for the username for the third party you are removing access from.
On the next screen select “Manage Account Access.”
General access and any accounts that the third party has access to will be listed here. The “Cancel Access” hyperlinks can be used to cancel general access, or to cancel access to a specific account type.

Remove Additional Logon Access

“Additional Logons” are usernames that are created through the Revenue Online portal using business information after the first username has been created. “Additional Logons” are listed under “Other Users.”

Log in to the account in Revenue Online.
Select “Manage My Account” in the upper right corner of the screen, then select “More…”
From the “Other Users” menu, select “Manage Additional Logons.”
Select the username that you wish to remove access for.
Select “Deactivate Access” to cease login access for the username. For a deactivated account, the only hyperlink action available for the Username is "Reactivate Access."

Note: Even if you deactivate a Logon, the Username of the person who, at one time, had access to your account will remain in the listing. Active logins are displayed with blue text, deactivated logins are displayed with gray text.

Remove Secondary Logons

Log in to the account in Revenue Online. On the top of the screen, click "Manage My Profile", then click “More…".
From here, click on the link "Manage Secondary Logons" from the "My Users" menu, then select the Username that you wish to remove access.
To cease the logon access, select the link "Deactivate Access." For a deactivated account, the only hyperlink action available for the Username is "Reactivate Access."

Note: Even if you deactivate a Logon, the Username of the person who, at one time, had access to your account will remain in the listing. Active secondary logins are displayed with blue text, deactivated logons are displayed with gray text.