About warehouse security

The most common scenarios of managing the security of warehouses are the following:

• Managing access to windows based on functional role:
  If employees perform specific tasks (such as accepting goods and creating purchase orders), you can provide the employees access to the windows they use in their work, and revoke access for windows that they shouldn't use.
  
• Managing the visibility of particular warehouses by user:
  If you have created multiple warehouses in Visma.net ERP, you can restrict the visibility of warehouses to users on windows by using restriction groups.
  
  You can create and manage multiple warehouses in Visma.net ERP only if the Multiple warehouses functionality is enabled in the Enable/disable functionalities (CS100000) (CS100000) window.

In addition to managing the visibility of warehouses in whole, you can restrict the visibility of particular stock items.
For details, see: About stock item security.

By using the User security windows, you can use user roles in Visma.net ERP to give employees access to windows related to working with warehouses.
A role can correspond to an area of responsibility for an employee who performs warehouse-related tasks, such as creating purchase orders, accepting goods, and preparing replenishment.
If needed, you can assign multiple roles to an employee.
For more information about user roles, see: About role-based access.

Consider the following examples of roles for employees who work with the Inventory module:

• Supervisor
  A role for an employee who configures the Inventory workspace and manages work with the workspace.
  This role should have access to the windows in the Manage and Explore nodes of the Work area tab and to the Configuration tab of the Inventory workspace.
• Data entry clerk
  A role for an employee who creates documents on data entry forms.
  You should provide access to windows in the Enter node of the Work area tab of the Inventory workspace for this role.
• Purchasing manager
  A role for an employee who is responsible for replenishment.
  For this role, you should provide access to the Replenishment node of the Processes tab of the Inventory workspace.

By default, all employees who have access to windows of the Inventory module can see all warehouses created in the system.
By using the windows of the Row-level security workspace, you can configure the system so that each warehouse is displayed only to users who work with this warehouse.
You can use restriction groups to set up visibility of warehouses to employees.
For details on restriction groups, see: About restriction groups in Visma.net ERP.

For example: Suppose that your system has the Wholesale and Retail warehouses defined, and you need to configure visibility of these warehouses to users as follows:

• User S is a supervisor and should configure and manage both warehouses.
• User C1 is a clerk who enters documents for the Wholesale warehouse.
• User C2 is a clerk who enters documents for the Retail warehouse.

To configure visibility of warehouses according to this example, you do the following in the Warehouse access (IN102000) window:

1. You create two restriction groups of type A (with direct restriction): Group 1 for the Wholesale warehouse, and Group 2 for the Retail warehouse.
2. In Group 1, you include User S, User C1, and the Wholesale warehouse.
3. In Group 2, you include User S, User C2, and the Retail warehouse.

The resulting visibility of warehouses will be the following:

• User S can see both the Wholesale and Retail warehouses.
• User C1 can see only the Wholesale warehouse.
• User C2 can see only the Retail warehouse.

In the following table, you can find the list of windows that you can use to manage restriction groups with warehouses and tasks that you can solve by using each window.

For information about how to add or remove objects from a restriction group, see: About operations with restriction groups.