I’ve been assigned the task of establishing permissions and developing role-based permission sets for our organization. The roles are straightforward. Here’s what’s needed:
- Inventory Manager: Needs access to items, vendors, and ordering processes.
- Accounts Payable: Responsible for vendor payments, processing one-time purchase invoices, and managing vendor relationships.
- Accounts Receivable: Handles customers, customer invoices, and receipt processing.
- Additionally, a comprehensive set for all accounting functions is required.
The initial three roles should be restricted from accessing the chart of accounts and viewing the financial details associated with each account. Although I’ve adjusted menus and roles, this hasn’t stopped users from using the “tell me” feature to access restricted areas. Utilizing the recording feature in permission sets often inadvertently grants full read access to the general ledger accounts, which is not our intention.
The recording adds numerous permissions, many of which are unclear, leading to confusion. There’s also uncertainty about whether the settings are correct, especially since table 15 is granted full read access—raising concerns about other unintended permissions being set.
The first three roles do need posting capabilities, and I’ve discovered that this can be accomplished through adding two permission sets. One with read permissions set to yes and limiting to entry zero. the other with read permissions set to indirect.
Is it really as simple as setting the primary tables to indirect if they show up in the recordings and the user shouldn’t have permission to get to the card page for that table?
Does anyone have “starter” permissions sets that are easily built off of?