Visma.net ERP
About the security of cash accounts
Cash is a company's most liquid asset, which is why an organisation must have adequate controls to secure it.
In Visma.net ERP, you can set up user access to cash accounts at multiple levels and control which users can view which particular cash accounts.
Managing access by branch roles
If the Multi-branch support functionality is enabled in your system in the Aktivera/inaktivera funktioner (CS100000) window, you can create and maintain multiple branches in your instance of Visma.net ERP.
You can configure user access to the branch-specific data, including access to cash accounts (that is, the ability to perform operations on the cash accounts) on a per-branch basis by using branch roles.
You can achieve more granular access control with user roles, which grant or deny access to system objects (modules, workspaces, records, window fields, and operations).
Managing visibility by restriction groups
You can control the visibility of a specific cash account to users (that is, which users can view the account) with the help of restriction groups.
To restrict the visibility of the cash account, you include the general ledger account the cash account is linked to in a restriction group by using the Restriktionsgrupper per konto (GL104020) window.
We recommend that you carefully design and configure restriction groups containing accounts, subaccounts, and branches, so that a user can view all these entities.
Otherwise, a user may encounter problems with processing transactions of the linked cash accounts.
Managing visibility by branch
The visibility of a cash account can also be restricted by the branch the account belongs to, in addition to the branch roles and restriction groups (described above).
Consider a user who is allowed to view multiple branches due to assigned branch roles and is a member of restriction groups of General ledger accounts, subaccounts, and branches.
Such a user can view (on the data entry forms) the cash accounts of all the branches this user is allowed to view, based on the user's membership in restriction groups and the branch selected on the data entry window (in the Branch field, which is filled by default with the branch to which the user is currently signed in).
If the Multi-branch support functionality is disabled, all cash accounts belong to a single branch and are visible to all users who are allowed to view the accounts, based on their membership in restriction groups.
To restrict the visibility of a cash account by the branch, you should enable the Inter-branch transactions add-on functionality, which gives you the ability to configure the automatic generation of inter-branch transactions for each document that involves multiple branches.
With this functionality enabled, the Restrict visibility by branch check box appears in the Cash accounts (CA202000) window.
You select the Restrict visibility by branch check box for each cash account.
In this case, the cash account is visible to only users who can select the branch (specified for the cash account) in the Branch field on the data entry windows.
If the Restrict visibility by branch check box is cleared for a cash account, this cash account will be visible regardless of the selected branch.
If the Branch field is absent on a data entry window, then the visibility of the cash account is defined by the branch to which the user is currently signed in.
