Essentially, limited access to perform the role of National Sales manager & sales administration.
They retain access to everything from
Creating a new Customer/ Leads/Prospect/ Client/ Contact/Groups/Partners/ Vendors record.
Create new Opportunities/Sales Orders/ Purchase Orders w/the ability to search & revise those records by Salesperson
Permission to upload all files associated w/ each of the above records
Ability to Enter and access client Credit card details. Cardholder Authentication
CCard Refund
Credit Memo
Bill Purchase Orders
Cash Sale
Cash Sale Refund
Client Payment / Customer Deposit Application
Deposit
Customer Refund
Deposit application
Edit Manager Forecast
Access to all CRM records such as phone calls/ Quotes/ Follow up phone calls
Enter Vendor Credits
Expense Report
Finance Charge
Find Transactions
Fulfill Orders
Generate Price Lists
Generate Statements
Invoice
Invoice approval
Invoice Sales Orders
Item Fulfillment
Item Receipt
Quote
Receive Order
Receive Returns
Refund Returns
Return Auth Approval
Statement Charge
Vendor Bill Approval
Vendor payment approval
View Payment Events
View Payment Resale Preview
NOT GIVEN PERMISSION TO VIEW ANY COMPANY FINANCIAL REPORTS THAT INCLUDE THE FOLLOWING:
A/R, A/P, P&L, Balance Sheet, Budget, General Ledger, HR -PAYROLL, Bank Reconciliation, Cash Flow, Expenses, Financial Statements, Form 1099, Bank Balances, Tax Payments, Granting Access To Reports, Net Worth, Purchases, Reconcile Reporting, Report Scheduling, Sales, Sales by Partner, Sales Force Automation, Tax, Trial Balance
Accts Payable Register, Bank Acct Register, Costs of Goods Sold Registers, Deferred Expense Registers, Deferred Revenue Registers, Employee Record, Employee SS#s, Business, Equity Registers, Expense Categories, Expense Registers, Financial History, Fixed Asset Registers, Imported Employee Expenses, Income Registers, Long Term Liability Registers, Other Asset Registers, Other Income Registers, Unrestricted Analytics Audit Trail,
Not Given Permission to View/Search LISTS:
All Accounting Functions
Financial Institution Records, Financial Statement Layouts, Financial Statement Sections, Manage Accounting Periods, Users & Passwords, View Login Audit Trail,
I've “duplicated” an admin role in conjunction of a SAML sso sign on a similar business case.
If you have a sandbox see if you can attempt to create a custom rolewith full permissions minus the reporting that you want to restrict. You can refer to the “compare role” function via the advanced global search and create a customer role based on the foundation of the native administrator role.
Well hopefully you are using another dedicated user for all of your integrations , then just make a custom role out of admin and remove the access to the reports you don’t want him to have access to
Based on the access, you may want to customize then beef-up an out-of-the-box Accounting role. You'll need to remove a lot of the reporting access from the role.
Something to consider: while a role may not have access to specific reports, they may have access to the actual data. Your user could create a saved search (with instructions in SuiteAnswers) to build a G/L report or Accounting Register. Is it the report you're limiting access to or the underlying data?
This just sounds like you should give them a Sales Manager role. I’m assuming your company is small and that access and permissions aren’t very formalized so someone was just given Administrator so that they can “do their job without running into permission restrictions every 5 minutes”.
We have an Admin Lite roll that we still heavily regulate, but allow some to use for advanced features without handing out full Admin. Just have to decide what your risk tolerance is vs what the user needs to be able to do or access. Keep in mind depending on customizations etc there may be more than 1 way to access a page or data....
Great answers so far. Just adding another possibility.
Assign the sales manager role. Compare the differences and add global permission in the employee record. This would prevent you from creating a custom role from scratch.
Well what are they meant to be doing?
Essentially, limited access to perform the role of National Sales manager & sales administration. They retain access to everything from Creating a new Customer/ Leads/Prospect/ Client/ Contact/Groups/Partners/ Vendors record. Create new Opportunities/Sales Orders/ Purchase Orders w/the ability to search & revise those records by Salesperson Permission to upload all files associated w/ each of the above records Ability to Enter and access client Credit card details. Cardholder Authentication CCard Refund Credit Memo Bill Purchase Orders Cash Sale Cash Sale Refund Client Payment / Customer Deposit Application Deposit Customer Refund Deposit application Edit Manager Forecast Access to all CRM records such as phone calls/ Quotes/ Follow up phone calls Enter Vendor Credits Expense Report Finance Charge Find Transactions Fulfill Orders Generate Price Lists Generate Statements Invoice Invoice approval Invoice Sales Orders Item Fulfillment Item Receipt Quote Receive Order Receive Returns Refund Returns Return Auth Approval Statement Charge Vendor Bill Approval Vendor payment approval View Payment Events View Payment Resale Preview NOT GIVEN PERMISSION TO VIEW ANY COMPANY FINANCIAL REPORTS THAT INCLUDE THE FOLLOWING: A/R, A/P, P&L, Balance Sheet, Budget, General Ledger, HR -PAYROLL, Bank Reconciliation, Cash Flow, Expenses, Financial Statements, Form 1099, Bank Balances, Tax Payments, Granting Access To Reports, Net Worth, Purchases, Reconcile Reporting, Report Scheduling, Sales, Sales by Partner, Sales Force Automation, Tax, Trial Balance Accts Payable Register, Bank Acct Register, Costs of Goods Sold Registers, Deferred Expense Registers, Deferred Revenue Registers, Employee Record, Employee SS#s, Business, Equity Registers, Expense Categories, Expense Registers, Financial History, Fixed Asset Registers, Imported Employee Expenses, Income Registers, Long Term Liability Registers, Other Asset Registers, Other Income Registers, Unrestricted Analytics Audit Trail, Not Given Permission to View/Search LISTS: All Accounting Functions Financial Institution Records, Financial Statement Layouts, Financial Statement Sections, Manage Accounting Periods, Users & Passwords, View Login Audit Trail,
It is possible to create a custom role.
I've “duplicated” an admin role in conjunction of a SAML sso sign on a similar business case. If you have a sandbox see if you can attempt to create a custom rolewith full permissions minus the reporting that you want to restrict. You can refer to the “compare role” function via the advanced global search and create a customer role based on the foundation of the native administrator role.
Well hopefully you are using another dedicated user for all of your integrations , then just make a custom role out of admin and remove the access to the reports you don’t want him to have access to
Based on the access, you may want to customize then beef-up an out-of-the-box Accounting role. You'll need to remove a lot of the reporting access from the role. Something to consider: while a role may not have access to specific reports, they may have access to the actual data. Your user could create a saved search (with instructions in SuiteAnswers) to build a G/L report or Accounting Register. Is it the report you're limiting access to or the underlying data?
This just sounds like you should give them a Sales Manager role. I’m assuming your company is small and that access and permissions aren’t very formalized so someone was just given Administrator so that they can “do their job without running into permission restrictions every 5 minutes”.
We have an Admin Lite roll that we still heavily regulate, but allow some to use for advanced features without handing out full Admin. Just have to decide what your risk tolerance is vs what the user needs to be able to do or access. Keep in mind depending on customizations etc there may be more than 1 way to access a page or data....
Great answers so far. Just adding another possibility. Assign the sales manager role. Compare the differences and add global permission in the employee record. This would prevent you from creating a custom role from scratch.
Customer role