An operational description: which actions live in the Israel Tax Authority's online area, what is needed to get access, and how business access differs from a representative's.
Key takeaways
- Access is needed for routine actions, not only for periodic filing.
- A representative's authorisation and the business's own access are two different things, and both are usually needed.
- The time to arrange access is before you need it, not on the day you do.
- Some services are open to public lookup and need no login at all.
- The business's software connects separately from the person, and that is an independent point of failure.
This is an operational description only of what is done against the online systems, not tax advice. What must be reported, what is liable and what is permitted are questions for an accountant or a licensed representative. What is useful to a business owner: knowing which actions exist there, who needs access to each, and what stalls businesses at exactly the moment they need it.
Which actions live there
| The action | Who usually does it | When |
|---|---|---|
| Requesting an invoice allocation number | The invoicing software, automatically | On every issue above the threshold |
| Verifying a supplier invoice by allocation number | Whoever pays | Before payment |
| Issuing withholding and bookkeeping certificates | The business or the representative | At the start of the year and on request |
| Checking a supplier's withholding certificate | Whoever pays | Before the first payment |
| Periodic filing and payment | The representative, usually | At the end of each reporting period |
The fourth row is the least familiar to business owners, and the only one on the list that requires no identified login: the Tax Authority runs a public system for checking withholding and bookkeeping certificates by business or company number.
Why access always gets arranged late
The pattern is nearly identical everywhere: as long as the representative handles everything with the authority, the owner has no reason to arrange their own access. Then comes a moment when they need something immediately - a certificate to show a customer, a check before a payment, or connecting new software - and the access does not exist.
What makes it maddening is that the need is always urgent. A withholding certificate is requested by a customer who wants to pay today, not a week ahead. So the only operational recommendation here is to arrange access in a quiet period, even if it goes unused for two months.
Three different kinds of access that get confused
- Business access - an identified login by the owner or somebody authorised on their behalf.
- Representative access - an accountant or tax adviser acting for the business under a power of attorney.
- Software connection - an authorisation granted to a system rather than to a person, for automated actions.
The third is the surprising one. Invoicing software requesting an allocation number is not using either of the first two - it is connected separately, so it can break regardless of the fact that the person logs in perfectly. That explains why "I checked and I can get in" is no proof the software is connected.
What is not there?
It is worth saying what the online area is not. It does not replace the representative, and it does not tell a business what to report or what may be deducted - it is an interface for performing actions and issuing documents.
The practical implication is that independent access does not make the accountant redundant and is not meant to. What it does remove is the waiting: a certificate a customer wants now, a supplier check before paying, and connecting new software without arranging a meeting.
So the right decision is not "do everything yourself" but to split the actions in two - what can be done immediately, and what belongs to the representative - and make sure each has a route.
What to verify once a year
This check takes a quarter of an hour and prevents most surprises:
- That the owner's access is still active and the identification means is valid.
- That the representative authorisation reflects the current representative rather than the previous one.
- That the software connection works - that is, that an invoice above the threshold was issued successfully recently.
- That whoever left the business is no longer authorised.
- That the contact details on file are an address somebody reads.
The fourth item is almost always forgotten and is also the hardest to fix afterwards. The simple procedure is to attach it to what is already done when somebody leaves, together with the other permissions described in digital employee records.
Who needs access to what
| The role | What they need | What they do not |
|---|---|---|
| The owner | Full access in the business's name | Does not have to file personally |
| Bookkeeper | Issuing certificates and checking suppliers | Not necessarily access to everything |
| The representative | A valid representative authorisation | Does not use the owner's credentials |
| The software | Its own connection | Does not depend on any person |
The third row is where businesses fall: with no proper representative authorisation, the accountant ends up working from the owner's login. That works perfectly until you change representatives, and then there is no way to know what was done and by whom.
What to do when something fails on filing day
The operational answer is not to try to solve it alone under pressure. The Tax Authority runs a call centre (*4954), and the business's representative is usually the faster route - they have access, experience with the common faults, and can say within a minute whether this is a general outage or specific to the business.
What is worth doing before calling is documenting: exactly what appeared on screen, when, and during which action. A precise description saves a round of questions and produces a faster answer, and that holds with the call centre and with the representative alike.
What happens when the linked person leaves
This scenario brings down more small businesses than any technical fault. Access was opened in the name of whoever handled it, they left, and the identification means is tied to them - so the business has no access until it is re-established.
What prevents it is confirming at setup that the access is in the name of somebody who will stay, and that at least one other person can act. At a small business that is usually the owner, even if in practice they will never log in.
Once it has happened the fix is procedural rather than technical, so it takes time. That is exactly why the annual check mentioned above includes it - it is cheap done on time, and not cheap at all otherwise.
Sources
Frequently asked questions
Does an owner need their own access if they have a representative?
Whether it is required is a question for the representative. Operationally, independent access saves a wait every time an immediate document is needed, which is why most owners who arrange it do so right after the first time they waited.
Can you check a supplier without logging in?
The certificates system for withholding and bookkeeping works by identifying number, so it suits a pre-payment check. What exactly should be retained from the check is a matter for the accountant.
What happens when you change representatives?
The old authorisation does not disappear by itself, which is why it is one of the annual checks. Beyond the formal side, a former representative left authorised is also a question of who can see the business's information.
Does the software need a separate connection for every action?
Not for every action, but yes separately from the person. That is why a fault issuing an invoice is not resolved by somebody logging into the website and confirming all is well - the two routes are checked separately.
Keep reading
Related service
MVP Development
Turn an idea into a validated product in weeks, not months.
About the author
Yehonatan Saadia
Freelance automation, web & MVP developer
I'm Yehonatan Saadia, a senior developer who builds business automation, custom websites, and MVPs for small and mid-sized companies across the US, Europe, and Israel. These guides come from real client work, not theory.
Work with meHave a project like this?
Tell me what you're trying to automate or build and I'll tell you the fastest reliable way to ship it.
