Account Link Authorization

Module Guide: Account Link Authorization

Module Location

Settings > Accounting Settings > Account Link Authorization

Module Purpose

The Account Link Authorization module is a crucial security and access control feature. Its function is to grant or restrict the authority of specific users (employees) to access or use functionalities related to specific Account Link categories. This allows for the implementation of the principle of separation of duties and ensures that only authorized personnel can perform transactions in sensitive accounting areas.​

1. Main View (Authorization Page)

The main page is an interface for managing user access rights to specific Account Link categories within a chosen company.

View Explanation

• Filter:

  • Account Link: A dropdown to select the functional accounting category for which access rights will be set (e.g., Inventory, Sales, Asset Management).

  • Company: A dropdown to select the company where this authorization rule will apply.

• Access Management Boxes:

  • Unauthorized Employees: The box on the left, displaying a list of all users who currently do not have access to the selected Account Link category.

  • Authorized Employees: The box on the right, displaying a list of users who currently have been granted access.

• Movement Buttons:

  • >>: Moves a selected user from the "unauthorized" list to the "authorized" list, thereby granting them access rights.

  • <<: Moves a selected user from the "authorized" list to the "unauthorized" list, thereby revoking their access rights.

• Action Button:

  • Change: Saves all authorization configuration changes that have been made.

2. Steps to Set Authorization

• Select Functional Area: Choose an Account Link category from the dropdown (e.g., Inventory).

• Select Company: Specify the Company where this rule will apply.

• Grant Access: In the left box ("Unauthorized Employees"), select one or more employee names you want to grant access to. Click the >> button. Their names will move to the right box.

• Revoke Access: If you want to revoke access rights, select an employee's name from the right box ("Authorized Employees") and click the << button.

• Save Changes: Once finished, click the Change button at the bottom to save the configuration.

3. Integrated Workflow & Business Process

• Access Control Implementation: The settings in this module directly limit what users can see and do in other modules.​

• Example: If you set up authorization for Account Link: Inventory and only grant authority to "Khusni Amalia," then only Khusni Amalia can perform transactions that touch inventory-related accounts (such as creating a Stock Adjustment Journal, viewing the Inventory Value Report, etc.). Other users will not be able to access these functions or will receive an error message.

• Separation of Duties: This is an effective tool for implementing the separation of duties. For example, you can set it so that only Warehouse staff can access the Inventory Account Link, while only Accounting staff can access the Revaluation Account Link.

4. Tips & Important Notes

• Principle of Least Privilege: Apply the "principle of least privilege." Grant users authority only for the areas they absolutely need to perform their jobs.

• Periodic Review: Review these authorizations periodically (e.g., quarterly or whenever there is a change in employee roles) to ensure access rights remain relevant and secure.

• Critical Security: This module is one of the pillars of financial data security within the system. Access to change the settings in the Account Link Authorization module itself must be highly restricted, ideally only to the System Administrator.