I have a client who after an audit now wants to remove all access to payroll functions for non-payroll people. Which roles are the payroll only roles? I may need to create new roles for just the payroll tasks and assign those roles to people.
*This post is locked for comments
Thank you for this thorough explanation. I will start by checking to see if they have Account Level Security turned on.
In Dynamics GP, the predefined security roles which explicitly include payroll functions are;
Although, there are several other security roles which might have access to Payroll Window, mostly associated with AP. For instance, AP Clerk Role. See Reference, Security Roles in GP2013
In this essence, any further security roles which includes one or more of the following security tasks shall be revised;
SECURITYTASKID | SECURITYTASKNAME |
ADMIN_PAYRL_001* | Set up Payroll |
ADMIN_PAYRL_002* | Reconcile Payroll data |
ADMIN_PAYRL_003* | Remove payroll information |
ADMIN_PAYRL_004* | Edit payroll liabilities |
ADMIN_PAYRL_005* | Mass update |
ADMIN_PAYRL_006* | Estimate gross pay |
ADMIN_PAYRL_007* | Period end payroll routines |
ADMIN_PAYRL_008* | Payroll tables |
INQ_PAYRL_001* | View payroll transaction history |
INQ_PAYRL_002* | View employee/payroll information |
INQ_PAYRL_003* | View pay code history |
INQ_PAYRL_004* | View company payroll summary |
RPT_PAYRL_001* | Employee list reports |
RPT_PAYRL_002* | Employee wage and hour reports with history |
RPT_PAYRL_003* | Reprint journals |
RPT_PAYRL_004* | Payroll setup reports |
RPT_PAYRL_005* | Period end payroll reports with posting |
RPT_PAYRL_006* | Quarter end payroll reports |
RPT_PAYRL_007* | Cross-company reports |
RPT_PAYRL_010* | Employee/payroll letters |
TRX_PAYRL_001* | Enter payroll transactions |
TRX_PAYRL_002* | Build payroll checks |
TRX_PAYRL_003* | Calculate payroll checks |
TRX_PAYRL_004* | Print payroll checks |
TRX_PAYRL_005* | Generate ACH file |
TRX_PAYRL_006* | Enter manual payroll checks |
TRX_PAYRL_007* | Enter/edit Payroll batches |
TRX_PAYRL_008* | Void payroll checks |
TRX_PAYRL_009* | Activate post-dated pay rates |
I would like to shed a light on an essential issue when it comes to completely removing the access to "Payroll" function for non-payroll people. In addition to windows access, Account Level Security is a must in this case.
In one of the environment I worked at where Account Level Security was implemented, on the organization structure, two different levels were defined which are ; AP Accountant, and AP Payroll Accountant. Each of these levels is granted access on the associated account of the its function per "main segment". This ensures that not only windows access is removed by accounts as well.
Stay up to date on forum activity by subscribing. You can also customize your in-app and email Notification settings across all subscriptions.
André Arnaud de Cal... 291,240 Super User 2024 Season 2
Martin Dráb 230,149 Most Valuable Professional
nmaenpaa 101,156