Invoice: Permissions
Permissions control which users can see, review, approve, administer, or export invoices.
Typical Roles
Typical roles in an invoice process are:
- accounting users
- reviewers
- approvers
- administrators
- users with rights limited by department, accounting area, or client
Accounting
Accounting users usually need broad access within Invoice. This includes invoice overviews, master-data maintenance, status checks, export handling, and post-processing.
Reviewers and Approvers
Reviewers and approvers receive access to the invoices for which they are responsible. Depending on the configuration, access can be controlled by department, client, workflow assignment, financial authority, or object permissions.
Administration
Administrators maintain technical and business settings. This includes users, roles, client assignments, mail options, interfaces, workflow settings, and other configuration.
Client and Department Rights
In multi-client or departmental environments, users should only see invoices that are relevant to them. Roles, client assignments, accounting areas, and object ACLs ensure that tasks and reports reach the correct people.
If a user can see an invoice but cannot perform an action, check status, responsibility, write permission, workflow permission, and substitution rules.