Depreciation Roles and Segregation of Duties

SOLVED

Do you have a matrix or template we can follow for our finance department?  We have 3 roles:

- FAS500 Sys Admin - for IT to add users

- Finance Admins - for Finance to add/modify a company

- Finance Users - for Regular Finance Staff

We are getting an inquiry from the audit team why some role's permissions are assigned and we are wondering if there is a standard matrix we can follow to adhere to any compliance segregation of duties requirements.

  • 0
    SUGGESTED

    Hello Todd,

    Are these Windows users? If so, there is not much I can say about them since that would be a part of Windows Authentication and Security. I can tell you that the program expects the Windows Authentication user to have execute rights to any folder with an executable file in it.

    Do you have Password Security turned on? If you looking at users in the Password Security in the program, the Profiles assigned to the user are locally created in the system, then ever thing would depend how you setup those profiles. Although the only user which can add/remove users within the system is the Supervisor user. You cannot create a user to do that. See How to setup Password Security for more information.

    ~Delray

  • 0

    Todd - Good news is that the FAS 500 and Premier Depreciation is the same product just updated so the security function discussed here is the same in functionality and configuration.

  • 0
    verified answer

    Todd - I do not know if FAS500 is comparable to Premiere Depreciation, but I can lend the following info to you.  The Admin logs on to the system with a special user ID - Adminstrator.  That ID has access to everything including adding users.  Delray gives you the recommendation on Window Authentication which I highly recommend.  Here is the key- Because of the Administrator account being on its own, the admin user can't be setup with a license within the software or else you will authenticate.  We have the same two types of user as well.  If they are relatively the same product, the rights are setup in the company profile definitions.  For the regular finance staff, for the stuff the finance admins will need access, most of the items will be none and other items like reports will be read only.  The our finance admins have the power to actually book depreciation and then close the month, do bulk disposals, etc.so they have Edit access there.  Please let me know if that helps from a guidance standpoint.

  • 0
    SUGGESTED

    Thank you.  I got the roles modified and have resubmitted.