About warehouse security

You can create and manage multiple warehouses in Visma Net only if the Multiple warehouses functionality is enabled in the Enable/disable functionalities (CS100000) window.

To limit the set of employees who work with a particular warehouse, you can create restriction groups to display a warehouse only for employees who are responsible for tasks that involve this warehouse. If the employees who work with the same warehouse perform only specific tasks (such as accepting goods and creating purchase orders), you can provide access to only those windows that these employees should use.

The most common scenarios of managing the security of warehouses are the following:

• Managing access to windows based on functional role
  
• Managing the visibility of particular warehouses by user
  

By using the User security windows, you can use user roles in Visma Net to give employees access to windows related to working with warehouses.

A role can correspond to an area of responsibility for an employee who performs warehouse-related tasks, such as creating purchase orders, accepting goods, and preparing replenishment.

If needed, you can assign multiple roles to an employee.
For more information about user roles, see: About role-based access.

Examples of roles

Consider the following examples of roles for employees who work with the Inventory module. Through the Access rights by role (SM201025) window, you can administer the access you want for each of these roles.

• Supervisor
  A role for an employee who configures the Inventory workspace and manages work with the workspace.
  Through the above mentioned window, this role should have access to the windows in the Manage and Explore nodes of the Work area tab, and to the Configuration tab of the Inventory workspace.
• Data entry clerk
  A role for an employee who creates documents on data entry forms.
  Through the above mentioned window, you should provide access to windows in the Enter node of the Work area tab of the Inventory workspace for this role.
• Purchasing manager
  A role for an employee who is responsible for replenishment.
  For this role, you should provide access to the Replenishment node of the Processes tab of the Inventory workspace, through the above mentioned window.

By default, all employees who have access to windows of the Inventory module can see all warehouses created in the system.

Configuring restriction groups

By using the windows of the Row-level security workspace, you can configure the system so that each warehouse is displayed only to users who work with this warehouse.

You can use restriction groups to set up visibility of warehouses to employees.
For details on restriction groups, see: About restriction groups in Visma Net.

Practical example

Suppose that your system has the Wholesale and Retail warehouses defined, and you need to configure visibility of these warehouses to users as follows:

• User S is a supervisor and should configure and manage both warehouses.
• User C1 is a clerk who enters documents for the Wholesale warehouse.
• User C2 is a clerk who enters documents for the Retail warehouse.

The following table describes how to configure visibility of warehouses according to this example.

STEP	ACTION
1	Go to the Warehouse access (IN102000) window.
2	Create two restriction groups of type A (with direct restriction): Group 1 for the Wholesale warehouse, and Group 2 for the Retail warehouse.
3	In Group 1, include User S, User C1, and the Wholesale warehouse.
4	In Group 2, include User S, User C2, and the Retail warehouse.

Final visibility

The resulting visibility of warehouses will be the following:

• User S can see both the Wholesale and Retail warehouses.
• User C1 can see only the Wholesale warehouse.
• User C2 can see only the Retail warehouse.

In the following table, you can find the list of windows that you can use to manage restriction groups with warehouses and tasks that you can solve by using each window.

Tasks	Window
To initially configure the visibility of a warehouse to users	Warehouse access (IN102000)
To change the visibility of a warehouse in multiple restriction groups	Restriction groups by warehouse (IN102010)
To change the visibility of warehouses to a user in multiple restriction groups	Restriction groups by user (SM201035)

For information about how to add or remove objects from a restriction group, see: About operations with restriction groups.

In addition to managing the visibility of warehouses in whole, you can restrict the visibility of particular stock items.
For details, see: About item security.