Restructuring of current user permission and adding a new role type

Restructuring of profile : Invoice Manager

The group client users (profile name: Invoice manager) experience some limitations in their workflow with the current profile setup. Their user rights should be extended to view (read-only) the data on entity menus which helps them to reconcile what they can see in the user interface. 

Creation of new profile : Invoice Reviewer

With the onboarding of Institutional Client and Alternative Assets users, a new user profile is required. The targeted workflow is that group client users (role = Invoice Manager) do the setup of agreements and invoice conditions in the user interface. Based on the data importedimported, invoices will then automatically be generated. The invoice manager will do the first validation step ('Validate') and the new role invoice reviewer will do the final validation step ('Authorise').

The export process (initiating the sending of invoices and production of accounting files) is then again in the hands of the invoice managers.

To be able to review the invoice, the invoice reviewer needs to be able to see the invoice list. The list can be filtered to find more easily invoices related to either IC or AA