Granting authorisations to data users
An authorised person may retrieve income data reported to the Incomes Register via the e-service and in accordance with their role.
As a master user, you are responsible for granting, editing, and revoking authorisations within your organisation. Ensure that authorisation is carried out in accordance with your organisation's decision-making and other procedures.
You cannot edit your own details in the e-service, so every organisation must always have at least two master users.
How to authorise a data user role
Only grant people the authorisations they need to perform their duties. Avoid granting excessive viewing rights.
Please also remember to remove authorisations when a person no longer needs them for their work.
1
Select “Authorise a person”
Enter the individual’s personal identity code.
- An error message appears if the personal identity code is not found in the system, or it is not in the correct format.
If the individual already has an authorisation, you can immediately edit and revoke their authorisation in addition to granting them new authorisations.
- If an authorisation is not valid, you can change the validity start date.
- If an authorisation has yet to expire, you can change the validity end date.
- You can update the contact information of another master user.
2
Select “Add authorisation”
Select the data user role from the menu.
- You can check the role content in the organisation’s data permission. You can find the data permission in the e-service on the data content page.
- If an individual needs data on the wages paid by their organisation for their job, assign them the special role “Wages paid by own organisation” in addition to the data user role.
Enter the validity start and end dates for the authorisation.
- The default start date of the authorisation is the current date. If the authorisation should become valid later than this, change the start date.
- By default, the authorisation is valid for 25 years, but you can shorten or extend the validity period.
To add several authorisations for the same individual, select Add authorisation again.
3
Add personal information
Enter the name (first name and last name) of the person to be authorised.
- The system does not check whether the name matches the personal identity code.
If you are authorising a master user, also provide the person’s email and telephone number.
- The email and telephone number are saved to the person’s profile.
- Any changes to the master user’s information are made in this view.
To notify the authorised person of the authorisation granted, check the box “Send the authorised individual a notification of the authorisations granted”.
- Enter the authorised person’s email address in the field.
- This email address will not be saved to the person’s profile.
4
Save the changes
Once you have added all the necessary authorisations, click Save.
- You will be notified once the authorisations you have granted have been successfully saved in the Incomes Register.
- If necessary, you can return to edit or add new authorisations. To view the changes you have made, search the “Authorisations” page.
Read the instructions for the e-service:
See all instructions and sign in to the service.
See also the instructions how to use our services safely
Read more on the different roles and instructions for various functions:
Act as a private individual or on behalf of another individual
You can search for all authorisations granted by the organisation by selecting “Data user role” as the search criterion and selecting “All Roles” from the role menu. Then, click Search.
To view the organisation’s available roles, refer to the data permission on the “Data content” page of the e-service.
Organisation’s data access rights
Data is only disclosed on the basis of valid data access rights based on law and only to parties defined in the act on the incomes information system (laki tulotietojärjestelmästä 53/2018).
Data access profiles define the data disclosed to organisations by group in accordance with different purposes and situations of use. Only data that is necessary by law in the case at hand or the task being carried out can be disclosed at each time.
Individuals’ access rights
The access rights of organisations’ employees are limited in the Incomes Register’s e-service by means of data user roles. A single person may have several different roles.
One or more data access profiles of the organisation have been attached to each role. The roles are intended for different work-related tasks, and they can be used to view different data and make searches using different search terms. The data access profile and the user’s role together define what data is shown to the person and what search terms can be used to search for data.
Log data is generated on users’ activities in the e-service, using which organisations can monitor the use of the Incomes Register’s e-service in their organisation. Log events are generated, for example, when a user logs in to the Incomes Register or attempts to log in, and when they search for or view data.
Page last updated 5/13/2026