Configure Business Unit Data Security

Page or action access controls what users can open.

Business Unit data security controls which invoice data users can see and act on. Users who review invoice documents, manage invoice exceptions, download source documents, or correct invoices must be assigned access to the appropriate Business Units.

Any custom job roles assigned with the new invoice-related duty roles must also be granted Business Unit data security access. Otherwise, users cannot view invoice details.

Configure Business Unit data access using the Manage Business Unit Data Access for Users task. Assign the user, role, and Business Unit combination, then process permission group policies. Users need Business Unit security to drill down from Streams to Invoice List, view invoices, and search invoices directly from Invoice List.

To configure business unit data access:

1. Go to Navigator > My Enterprise > Manage Business Unit Data Access for Users.

2. Select the user.

3. Select the custom role.

4. Grant access to the required Business Units.

5. Process Permission Group Policies.

6. Save your changes.

7. Verify completion. After Business Unit access is configured and permission group policies are processed, confirm that users can view invoices for their assigned Business Units. Users should also be able to search invoices in Invoice List, drill down from Invoice Document Streams to Invoice List, and open invoice details for authorized Business Units.

Assign Business Unit Data Access in Bulk

To add user data access in bulk:

1. Download and install the desktop integration utility from Navigator > Tools > Download Desktop Integration Installer and enable macros in Microsoft Excel.

2. From the Manage Data Access for Users task in the Setup and Maintenance work area, query and download the current data access assignments.

3. Add or update the required user data access assignments in the downloaded spreadsheet, then upload the revised data to the application.