Visma.net ERP
About the security of cash accounts
Cash is a company's most liquid asset, which is why an organisation must have adequate
controls to secure it.
In Visma.net ERP, you can set up user access to cash accounts at multiple levels and control which users
can view which particular cash accounts.
Managing access by branch roles
If the Multi-branch support functionality is enabled in your system in the Enable/disable functionalities (CS100000) window, you can create and maintain multiple branches in your instance of Visma.net ERP.
You can configure user access to the branch-specific data, including access to cash
accounts (that is, the ability to perform operations on the cash accounts) on a per-branch
basis by using branch roles.
You can achieve more granular access control with user roles, which grant or deny access to
system objects (modules, workspaces, records, window fields, and operations).
Managing visibility by restriction groups
You can control the visibility of a specific cash account to users (that is, which users
can view the account) with the help of restriction groups.
To restrict the visibility of the
cash account, you include the general ledger account the cash account is linked to in a restriction
group by using the Restriction groups by general ledger account (GL104020) window.
We recommend that you carefully design and configure restriction groups containing accounts, subaccounts, and branches, so that a user can view all these entities.
Otherwise, a user may encounter problems with processing transactions of the linked cash accounts.
Managing visibility by branch
The visibility of a cash account can also be restricted by the branch the account belongs
to, in addition to the branch roles and restriction groups (described above).
Consider a
user who is allowed to view multiple branches due to assigned branch roles and is a member
of restriction groups of General ledger accounts, subaccounts, and branches.
Such a user can view (on
the data entry forms) the cash accounts of all the branches this user is allowed to view,
based on the user's membership in restriction groups and the branch selected on the data
entry window (in the Branch field, which is filled by default with the
branch to which the user is currently signed in).
If the Multi-branch support functionality is disabled, all cash accounts belong to a single branch and are visible to all users who are allowed to view the accounts, based on their membership in restriction groups.
To restrict the visibility of a cash account by the branch, you should enable the
Inter-branch transactions add-on functionality, which gives you the ability to configure
the automatic generation of inter-branch transactions for each document that involves
multiple branches.
With this functionality enabled, the Restrict visibility by branch check
box appears in the Cash accounts (CA202000) window.
You select the Restrict visibility by branch check box for each cash account.
In
this case, the cash account is visible to only users who can select the branch (specified
for the cash account) in the Branch field on the data entry windows.
If
the Restrict visibility by branch check box is cleared for a cash account, this cash
account will be visible regardless of the selected branch.
If the Branch field is absent on a data entry window, then the visibility of the cash account is defined by the branch to which the user is currently signed in.
