About security of general ledger budget articles

In Visma.net ERP, organisations implement general access restrictions by assigning roles to users of the system.
The roles assigned to users allow them to access the needed resources to perform specific tasks required for their jobs.
If a role allows a user to view or edit General ledger budget articles, the user can view all the articles, including those that might be sensitive.

By using restriction groups, you can limit the visibility of sensitive budget articles so that only particular users can see and work with these articles.
In this topic, you will read about configuring restriction groups for managing the security of sensitive general ledger budget articles.

In Visma.net ERP, you can configure groups with direct and inverse restriction.
In this topic, groups with direct restriction are used in examples for simplicity.
You can use inverse restriction groups in the same way as you use direct restriction groups.
For details on the types of restriction groups, see: About types of restriction groups.

You can configure restriction groups that will limit the visibility of General ledger budget articles (leaf articles or nodes at any level) for users.
As a result, the users not included in the group will not be able to see the budget articles (and these articles' subarticles, if there are any).

For example: Suppose that the Wages budget article should be available to only the chief financial officer of your organisation.
To configure the visibility of this budget article, you need to do the following in the Budget access (GL105030) window:

  1. You create a restriction group (for example, Group for wages budget article) with direct restriction.
  2. You add to the group the user account of the chief financial officer.
  3. You add to the group the Wages budget article.

For more details about restriction groups, see: About restriction groups in Visma.net ERP.

In the following table, you can find the list of windows that you can use to manage restriction groups with general ledger budget articles and tasks that you can resolve by using each window.

 
Task Window
To initially configure the visibility of a general ledger budget article to users Budget access (GL105030)
To change the visibility of a general ledger budget article in multiple restriction groups Restriction groups by budget article (GL105020)
To change the visibility of a general ledger budget article by user in multiple restriction groups Restriction groups by user (SM201035)

For information about how to add or remove objects from a restriction group, see: About operations with restriction groups.

Parent topic:Manage visibility with restriction groups - overview