Who backs up payroll in a small business?

Why payroll is bus factor 1 in most firms

Payroll is confidential, so owners deliberately keep it to one person. That instinct is right about privacy and wrong about continuity. The result is a process that runs on a fixed schedule, carries legal deadlines, and depends entirely on someone who might be sick on payday.

Payroll also looks simple from the outside, which hides the risk. The provider does the math. But someone has to collect hours, enter changes for new hires and raises, approve the run before the cutoff, make sure the account is funded, and answer the employee who was shorted. Each of those steps usually lives in one person's head and one person's login.

The portal login problem

Payroll providers commonly support more than one user with different permissions, but many small firms set up one login years ago and never added a second. Sometimes the login is shared instead: the owner knows the password, but the sign-in code goes to the payroll person's phone. A shared password with someone else's second factor is not a backup.

If your payroll provider is connected to Microsoft 365 for single sign-on, it appears as an enterprise app, and you can see who is assigned to it. An app with one assigned user is a quick flag. If it is not connected, check the provider's own user list.

Cross-training in a week

A backup does not need to run payroll every cycle. They need to have done it once, recently, with the primary watching.

• Day 1: give the backup their own login with the rights they would need. No shared passwords.
• Day 2: the primary walks through the pay calendar, cutoffs, and funding steps while the backup writes them in a shared document.
• Day 3: the backup enters this cycle's changes. The primary checks them.
• Day 4: the backup submits the run while the primary watches.
• Day 5: the backup writes down anything that surprised them. Those notes are the runbook.
• After that, repeat one supervised run each quarter so the knowledge does not fade.

What your provider will ask

When you add a second payroll user, expect the provider to ask a few things. Every provider differs, so treat this as a list to prepare rather than a script.

• Who is authorized to add users and change permissions on the account.
• The new user's name, contact details, and role.
• Which permissions they need: view only, enter changes, or approve and submit.
• Whether an account owner or signer must confirm the change.
• How funding is authorized if the usual approver is out.
• Having these answers ready turns a week of back-and-forth into one call.