Figure: Setting the permission for a user
On this page you set a number of permissions for the selected user. These concern all areas of the application: files, EDS, payments, account statements, AWV notifications, banks and accounts. If permissions are revoked from a user, the belonging menu item is not available. In addition, any changes to the corresponding preferences and bank properties cannot be made. This way, it is possible to assign certain roles to employees, such as Payment typist or EDS signatory. Apart from the general settings, additional special permissions are possible, which are described below.
These settings are used to hide the amounts in salary payments. For this purpose, salary payments must be specified as such. For SEPA payments either the field Payment category or Payment type is filled with one of the values SALA, PENS or BONU. For the DTAUS format the field text key is filled with the value 53-000 or 53-888.
There are three options for setting the permissions for salary payments. For the top of the three, there are no restrictions for the employee as to salary payments.
In the middle permission, the user can see salary payments in the overview Signed payments, but only without amounts. He can also see orders in the overview Sent files, where the totals are displayed too. The same applies to transmission reports, customer protocols and accompanying tickets. In the Distributed Electronic Signature (EDS), orders are displayed too and can also be signed. The individual payments are visible in the DS details, but without amounts for salary payments. External files with salary payments can be sent directly to the bank. When importing, on the other hand, salary payments contained in the file are ignored. If the user is an administrator, he is offered to change his permission to the upper one during the import.
With the lower permission, you can only see orders with salary payments in the EDS overview, and you can also sign them. The individual payments are visible in the EDS details, however for salary payments all fields are empty. External files with salary payments cannot be sent. The import is the same as for the middle permission.
When dealing with salary payments, you should always make sure that you don't send them as individual orders, but instead send multiple payments together in one order. Furthermore, when entering the payment, you should deactivate the option Display as single transaction in the account statement to prevent individual salary payments from being displayed in the account statement. Nevertheless, the account statement still displays the total of the payments contained in the order.
Furthermore, it is recommended to encrypt the local files, as otherwise direct access to the payment files is possible. The setting for this can be found in the preferences under General.
If this checkbox is set, the user has access to the overview of the files that have been provided for transfer. This can be found under the menu item Orders - Files to transfer.
In the preferences under Payment recording, you can specify that newly created or edited payment recipients must be confirmed by a second user according to the four-eyes-principle. Here you can set the right for this individually for each user.
With deactivated checkbox, the selected user cannot synchronize the application with the app for smartphones. The corresponding menu item Synchronize with app under Settings is then not available for this user. However, apps that have already been configured can still be used.
Administrators can see the additional rights Admin user is authorized to create users and to modify or delete other admin users and Admin user is authorized to create and delete tenants here. A Super-Admin* can grant or revoke these rights to administrators.
Figure: Setting the permission for a user