About customer security

If your organisation sells goods and provides services to customers, you may have a great deal of customer-related information stored in Visma.net ERP.
When the employees of your organisation create documents for customers, they have to select the required customer from the full list of customers.
If certain employees work with only very important customers, and other employees are not allowed to see these customers in the system for security reasons, you can create restriction groups to manage the visibility of your customers to users of Visma.net ERP, as described in this topic.

In Visma.net ERP, you can configure groups with direct and inverse restriction.
In this topic, groups with direct restriction are used in examples for simplicity.
You can use inverse restriction groups in the same way as you use direct restriction groups.
For details on the types of restriction groups, see: About types of restriction groups.

By using restriction groups, you can show or hide particular customers on Visma.net ERP windows, depending on the user who is logged in to the system.

For example: If some customers are very important to your organisation, dedicated employees might be assigned to process documents that contain information about these customers in the system.

For example: Suppose that your organisation provides cleaning services and Megabank is a very important customer of your organisation.

Manager M is responsible for all operations in the systems related to Megabank, and other managers should not see Megabank in any windows of the system.

To configure the visibility of this customer in the system, you need to do the following in the Customer access (AR102000) (AR102000) window:

  1. You create a restriction group (for example, Group for Megabank) with direct restriction.
  2. You add to the group the user account of the Manager M.
  3. You add to the group the Megabank customer.

If you use customer classes and want to include each new customer of a particular class in a restriction group automatically, you can specify a default restriction group for this class, as described in About operations with restriction groups.

In the following table, you can find the list of the windows that you can use to manage restriction groups with customers and the tasks that you can resolve by using each window.

Task Window
To initially configure the visibility of a customer to users Customer access (AR102000) (AR102000)
To change the visibility of a customer in multiple restriction groups Restriction groups by customer (AR102010)
To change the visibility of customers to a user in multiple restriction groups Restriction groups by user (SM201035) (SM201035)

For information about how to add or remove objects from a restriction group, see: About operations with restriction groups.