About security of cash accounts

Cash is a company's most liquid asset, which is why an organisation must have adequate controls to secure it.
In Visma.net ERP, you can control which users can view which particular cash accounts, as described in this topic.

In Visma.net ERP, you can configure groups with direct and inverse restriction.
In this topic, groups with direct restriction are used in examples for simplicity.
You can use inverse restriction groups in the same way as you use direct restriction groups.
For details on the types of restriction groups, see: About types of restriction groups.

The most common scenarios of managing the security of cash accounts are the following:

  • Managing the visibility by branch:
    If your organisation consists of multiple branches, you can allow users in each branch to work with only branch-specific cash accounts.
    You can configure multiple branches only if the Multi-branch support functionality is enabled in the Enable/disable functionalities (CS100000) window.
    If the Multi-branch support functionality is disabled, all cash accounts belong to a single branch and are visible to all users who are allowed to view the accounts, based on their membership in restriction groups.
  • Managing the visibility by user:
    If only a limited number of users can work with cash accounts, you can configure the visibility of the cash accounts to only these users.

The visibility of a cash account can be restricted based on the branch the account belongs to.

Consider a user who is allowed to view multiple branches due to this user's assigned branch roles.

On the data entry forms, this user can view the cash accounts of all the branches this user is allowed to view, based on the branch selected in the Branch field of the data entry form (which is filled by default with the branch to which the user is currently signed in).

To restrict the visibility of a cash account by the branch, you should do the following:

  1. In the Enable/disable functionalities (CS100000) window, you enable the Inter-branch transactions functionality, which gives you the ability to configure the automatic generation of inter-branch transactions for each document that involves multiple branches.
    With this functionality enabled, the Restrict visibility by branch check box appears in the Cash accounts (CA202000) window.
  2. In the Cash accounts (CA202000) window, you select a cash account, select the Restrict visibility by branch check box, and save your changes.
    You repeat this step for each cash account whose visibility you want to control.

    With this check box selected, the cash account is visible to only users who can select the branch (specified for the cash account) in the Branch field on the data entry forms.
    (If the Restrict visibility by branch check box is cleared for a cash account, this cash account will be visible regardless of the selected branch.)

    If the Branch field is absent on a data entry form, then the visibility of the cash account is defined by the branch to which the user is currently signed in.

Alternatively, you can restrict access to cash accounts by using branch roles in the same way as for general ledger accounts.

You can control the visibility of a specific cash account to users (that is, which users can view the account) with the help of restriction groups.

For example: Suppose that there is only one accountant in your organisation and only this person should work with a cash account in the system.
To restrict the visibility of the cash account, you should do the following in the General ledger account access (GL104000) window:

  1. You create a restriction group (for example, Access to cash account) with direct restriction.
  2. You add to the group the user account of the accountant.
  3. You add to the group the general ledger account the cash account is linked to.

CAUTION:
We recommend that you carefully design and configure restriction groups containing accounts, so that a user can view the accounts he or she needs for work.
Otherwise, a user may encounter problems with processing transactions of the linked cash accounts.

In the following table, you can find the list of the windows that you can use to manage restriction groups with cash accounts and the tasks that you can solve by using each window.

 
Task Window
To initially configure the visibility of a general ledger account to which a cash account is linked to users. General ledger account access (GL104000)
To change the visibility of a general ledger account a cash account is linked to. Restriction groups by general ledger account (GL104020)
To change the visibility of a general ledger account to which a cash account is linked by a user in multiple restriction groups. Restriction groups by user (SM201035)
To change the visibility of a general ledger account to which a cash account is linked by a branch in multiple restriction groups. Restriction groups by branch (GL103020)

For information about how to add or remove objects from a restriction group, see: About operations with restriction groups.

Parent topic:
Manage visibility with restriction groups - overview