Scope every record, query, action, export and attachment to the authenticated workspace and authorized entity.
Roles and permissions
Give each person the records and decisions their work requires.
Permissions
Summarised from the authored role permissions. Scope restrictions such as “own records” still apply; these symbols do not indicate completeness or runtime access.
| Table | Controller / CFO | AP Clerk | AR Clerk | Viewer |
|---|---|---|---|---|
| master | ||||
TaxRates | Manage / maintain: Manage ChartOfAccounts, AccountingPeriods and reviewed TaxRates | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated |
| transaction | ||||
Bills | Specific actions: Approve Bills, PaymentsMade, ExpenseClaims, VendorPayees, EmployeePayees and BankReconciliations within authority | Manage / maintain: Manage draft Bills and BillItems | —No table-specific permission stated | —No table-specific permission stated |
ExpenseClaims | Specific actions: Approve Bills, PaymentsMade, ExpenseClaims, VendorPayees, EmployeePayees and BankReconciliations within authority | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated |
BankReconciliations | Specific actions: Approve Bills, PaymentsMade, ExpenseClaims, VendorPayees, EmployeePayees and BankReconciliations within authority | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated |
ReceiptAllocations | —No table-specific permission stated | —No table-specific permission stated | Specific actions: Record PaymentsReceived and apply verified receipts through ReceiptAllocations | —No table-specific permission stated |
EmployeePayees | Specific actions: Approve Bills, PaymentsMade, ExpenseClaims, VendorPayees, EmployeePayees and BankReconciliations within authority | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated |
VendorPayees | Specific actions: Approve Bills, PaymentsMade, ExpenseClaims, VendorPayees, EmployeePayees and BankReconciliations within authority | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated |
| line item | ||||
BillItems | —No table-specific permission stated | Manage / maintain: Manage draft Bills and BillItems | —No table-specific permission stated | —No table-specific permission stated |
| finance | ||||
ChartOfAccounts | Manage / maintain: Manage ChartOfAccounts, AccountingPeriods and reviewed TaxRates | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated |
AccountingPeriods | Manage / maintain: Manage ChartOfAccounts, AccountingPeriods and reviewed TaxRates | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated |
Invoices | —No table-specific permission stated | —No table-specific permission stated | Manage / maintain: Manage draft Invoices and InvoiceItems | —No table-specific permission stated |
InvoiceItems | —No table-specific permission stated | —No table-specific permission stated | Manage / maintain: Manage draft Invoices and InvoiceItems | —No table-specific permission stated |
PaymentsReceived | —No table-specific permission stated | —No table-specific permission stated | Specific actions: Record PaymentsReceived and apply verified receipts through ReceiptAllocations | —No table-specific permission stated |
PaymentsMade | Specific actions: Approve Bills, PaymentsMade, ExpenseClaims, VendorPayees, EmployeePayees and BankReconciliations within authority | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated |
- Controller / CFOPost authorized balanced entriesClose or reopen periods with evidenceRead statements and audit records
- AP ClerkRecord bank imports and prepare reconciliationView supplier balancesNo self-approval, manual journal posting, period reopening or unrestricted bank-secret access
- AR ClerkIssue valid invoicesView customer balancesNo manual journal approval, outgoing bank release or period reopening
- ViewerView entity-scoped posted statements and permitted subledger reportsExport scoped reports with masked bank and tax identifiersNo writes, approvals, posting or integration changes
How permissions work
5 rulesKeep preparation and independent approval separate where the process requires review.
Protect bank details, tax identifiers and private financial values at field level.
Treat an administrator’s technical access separately from business decision authority.
Record failed and successful protected actions in the retained audit history.
The roles
Controller / CFO
Controller / CFO works within the record, field and action scope below.
Permissions and screens
ManageChartOfAccounts, AccountingPeriods and reviewed TaxRatesPrepareand independently approve JournalEntriesApproveBills, PaymentsMade, ExpenseClaims, VendorPayees, EmployeePayees and BankReconciliations within authorityPostauthorized balanced entriesCloseor reopen periods with evidenceReadstatements and audit records
Unposted Journal EntriesDraft
Journal Entry NumberDateDescriptionEntry Type
Adjusting
Journal Approval InboxSubmitted
Journal Entry NumberDateDescriptionTotal Debit
Draft BillsDraft
Bill NumberVendorBill DateDue Date
Draft
- JE-57139 Issue to WIP 2 d
- JE-86659 Completion at standard 11 d
- JE-90230 Goods receipt 8 d
- JE-13895 Scrap 7 d
- JE-12168 Bill match 7 d
JE-57139
- Date
- 15 Sep
- Description
- Issue to WIP
- EntryType
- Standard
- TotalDebit
- 570
- TotalCredit
- 70
AP Clerk
AP Clerk works within the record, field and action scope below.
Permissions and screens
Managedraft Bills and BillItemsPrepareVendorPayees and EmployeePayees and submit Bills, PaymentsMade and both payee records for independent approvalRecordbank imports and prepare reconciliationPrepareown ExpenseClaimsViewsupplier balancesNoself-approval, manual journal posting, period reopening or unrestricted bank-secret access
Draft BillsDraft
Bill NumberVendorBill DateDue Date
Vendor Payment Destination ReviewSubmitted
Payee NumberVendorEntityCurrency
Employee Payment Destination ReviewSubmitted
Payee NumberEmployeeEntityCurrency
Draft
- BLL-19767 VND-023 5 d
- BLL-79263 VND-026 7 d
- BLL-51243 VND-066 in 10 d
- BLL-76424 VND-082 10 d
- BLL-32712 VND-144 in 8 d
BLL-19767
- Vendor
- VND-023
- BillDate
- 12 Sep
- DueDate
- 17 Sep
- TotalAmount
- 880
- PreparedBy
- LX
AR Clerk
AR Clerk works within the record, field and action scope below.
Permissions and screens
Managedraft Invoices and InvoiceItemsIssuevalid invoicesRecordPaymentsReceived and apply verified receipts through ReceiptAllocationsPreparebank matches and own ExpenseClaimsViewcustomer balancesNomanual journal approval, outgoing bank release or period reopening
Overdue ARSent
Invoice NumberCustomerInvoice DateDue Date
Open InvoicesSent
Invoice NumberCustomerInvoice DateDue Date
My Expense ClaimsDraft
Claim NumberEmployeeClaim DatePurpose
StatusSentPartiallyPaidOverdueoverdue
Viewer
Viewer works within the record, field and action scope below.
Permissions and screens
Viewentity-scoped posted statements and permitted subledger reportsExportscoped reports with masked bank and tax identifiersNowrites, approvals, posting or integration changes
Overdue ARSent
Invoice NumberCustomerInvoice DateDue Date
Accounting Period ScheduleFuture
Period NamePeriod TypeStart DateEnd Date
Quarter
Recent Journal EntriesPosted
Journal Entry NumberDateDescriptionSource
AR
StatusSentPartiallyPaidOverdueoverdue
ERP•AI workspace
Start now Accounting for Small Business
Create your ERP.AI account and get started with Proto.