Review of existing user permissions and creation of new user roles
Restructuring of role : Invoice Manager
The corporate accounting team users (profile name: Invoice manager) experience some limitations in their workflow with the current profile setup. Their user rights should be extended to view (read-only) the data on entity menus which helps them to reconcile what they can see in the user interface.
Creation of new profile : Supervisor
In the new instance for IC and AA, the corporate accounting team will have a more restrictive user profile as invoices should be reviewed by users from other teams. This new role will be called 'supervisor'
This role will have identical rights as the invoice manager with the exception that the permission for authorising/ un-authorising invoices is withdrawn.
Creation of new profile : Executive
With the onboarding of Institutional Client and Alternative Assets users, a new user profile is required. The targeted workflow is that Corporate accounting team users (role = supervisor) do the setup of agreements and invoice conditions in the user interface. Based on the data imported, invoices will then automatically be generated. The supervisor will do the first validation step ('Validate') and the new role invoice executive will do the final validation step ('Authorise'). The export process (initiating the sending of invoices and production of accounting files) is then again in the hands of the supervisor.
To be able to review the invoice, the Executive user needs to be able to see the invoice list. The list can be filtered by invoice group type to find more easily invoices related to either IC or AA.
From the invoice screen the Executive user can navigate to the agreement and check all settings. The invoice review report will be accessible as well and the preview of the pdf invoice produced. Both the Authorise and Un-Authorise Buttons will be available.
Overview of roles with context of entities and teams :
| Entity | Team | Role |
| AMG GC_AA | Corporate accounting | Invoice manager |
| AMG GC_AA | Corporate accounting | Administrator |
| AMG GC_AA | Auditor | Auditor |
| KAG GC | Corporate accounting | Invoice manager |
| KAG GC | Corporate accounting | Administrator |
| KAG GC | Auditor | Auditor |
| KAG IC_AA | Corporate accounting | Supervisor |
| KAG IC_AA | Invoice reviewer | Executive |
| KAG IC_AA | Corporate accounting | Administrator |
| KAG IC_AA | Auditor | Auditor |
Please see the attached (reviewed) user permissions. They have changed since the concept proposal to be even more restrictive.
Security matrix 2026 proposal 20260728.pdfxlsx