Our SOX auditors have asked us to show them all of the users with access to post cash receipts. How can I figure out which security tasks can do this in order to then see which users are assigned to a role with those tasks?
*This post is locked for comments
That's a good question. I'd give them the phone number for Microsoft . . . :)
Thanks. I had found TRX_SALES_019* by reviewing the task setup report on each. But I'm dealing with auditors - how can I show/prove to them that these two tasks are the only ones that include the ability to post cash receipts? We've got the support debugging tool (which is great) and can use the security profiler there to see which roles and tasks have access to windows and reports, but that doesn't cover posting permissions.
SY10700 looks to hold the task definitions but haven't found a way to correlate the securityid field to specific functions (if it even should).
For now I ran a full Security Task Setup report to pdf then searched that. For us both ADMIN_COMPANY_011* and TRX_SALES_019* have access to post cash receipts but TRX_SALES_015* does not. This works but would be preferable to have a way to query or report specifically on this info.
TRX_SALES_015* Enter customer cash receipts
TRX_SALES_019* Sales Series post
are the Security Tasks that would cover posting cash receipts. Running the Security Task Assignment report will show you who has rights to these transactions. (Administration>>Reports>>Security).
This is assuming you're on GP10 or GP2010.
Hope this helps,
Stay up to date on forum activity by subscribing. You can also customize your in-app and email Notification settings across all subscriptions.
André Arnaud de Cal... 291,188 Super User 2024 Season 2
Martin Dráb 230,030 Most Valuable Professional
nmaenpaa 101,156