Role permissions

See also: Groups - Members

Add-ons

These roles are used to provide additional functionality to other roles. They do not grant access to invoices or other objects if used alone but must be used in combination with, for example, the Approver role.

Note: It is always possible to combine multiple roles to expand the rights of group members. For example, you can choose the role of Approver and the role of Set Flag to combine the rights of these roles so that an approver can also set a flag on the invoice.

1. Role: Edit buyer reference 
   This role grants access to modify the buyer reference field.
2. Role: Set Do Not Pay 
   Grants access to mark the invoice as "Do Not Pay".
3. Role: Set Flag 
   Allows setting and removing flags on invoices.
4. Role: Edit invoice type and PO number 
   Can change the invoice from cost to purchase order and vice versa.

Admin

1. Role: Semine Connect 
   Access to Semine Connect administration of integrations and sufficient access to send an invoice through the system. Read access to the organizational structure, clients, and account parameters to verify imports from external systems.

2. Role: View Administrator 
   Administration and sharing of views in the invoice list and invoice lines for the entire organization.

   Note: The view administrator role must be assigned at the organizational level to allow the creation of views at the organizational level.
   
3. Role: Pre-registration Settings Editor 
   Access to account settings for pre-registering invoices.

4. Role: 4-Eyes Principle

   Adds an extra layer of control by requiring a minimum number of unique users to approve an invoice before it reaches the Approved status.
   Invoices remain in the For Control status until the required number of approvals is completed.
   While in this status, only users with the 4-Eyes Principle role can modify or forward (reassign) the invoice.
   4 Eyes Principle Feature in SEMINE – Semine 

Approver

1. Role: Approver 
   By default, only invoices currently assigned to the user are shown. The user can also view invoices that were previously assigned to them, or where they were mentioned in a comment by selecting a different view in the invoice list.

   Note: Can also upload new invoices.

   Invoices where the user is mentioned in a comment can be viewed, but the user can only add a new comment, not modify the invoice.
   Under Options, the user can choose: Pause, Forward.

   • Attachment
     • Upload new attachment
     • Delete attachment
     • Edit attachment
   • Comment
     • Add comment to invoice and line regardless of assignment.

2. Role: Approver with read access (Read Only) 

   Note: Can only read invoices assigned to the user.
   • Invoice
     • Upload new
     • Approve
     • Edit
     • Reject
     • Pause/continue
   • Invoice lines
     • Read only access
   • Attachments
     • Upload only
   • Purchase order lines
     • Add
     • Edit
     • Remove

3. Role: Edit accounting lines 
   Allows editing accounting lines before posting.

   Note: Must be combined with another role to provide access to invoices.

4. Role: Approver - Read all invoices 
   Same access as the Approver role, but also provides read access to all invoices in the selected statuses.

   Note: Can read all invoices, including those not assigned.
   Note: Cannot upload new invoices.
   • Invoice
     • Edit
     • Approve
     • Reject
     • Pause/Resume
   • Invoice lines
     • Add
     • Edit
     • Remove
   • Attachments
     • Upload and delete attachments
   • Purchase Order
     • Add
     • Edit
     • Remove
   • Purchase order lines
     • Add
     • Edit
     • Remove

Controller

1. Role: Controller 
   A controller in Semine has full access to settings and write access to all invoices.
   A controller can approve, forward, reject, and pause on behalf of others. Can edit flags. Controller also has access to "Options" - Archive, move, reanalyze invoice, cancel workflows, restart flows.
2. Role: Controller - Without invoice upload 
   Same access as the controller role but without access to invoice upload.
3. Role: Controller - Read-only access 
   Same access as the controller role but only read access for invoices.
4. Role: Controller Light 
   Same access as the controller role but without access to settings nor authority to approve on behalf of others.

Integration

1. Role: Integration User 
   Full access to all functionality in the integration API and Semine Connect administration. This is the only role needed to set up and check an integration.
2. Role: SCIM Integration 
   • Users
     • Read
     • Create new
     • Deactivate
     • Remove
   • Groups
     • Read
     • Create new
     • Edit
     • Delete
     • Add user to group
     • Remove user from group
3. Role: Invoice Upload through API 
   Allows the user to upload invoices through the endpoint POST .../invoices in the integration API 

Invoice only

1. Role: Invoice - Read Only 
   Read-only access to all invoices. Often useful for auditors who need insight into all invoices.
2. Role: Invoice Editing 
   Access to edit all fields in invoices with selected invoice statuses.
   Does not provide access to settings or similar functionalities.

Reports

1. Role: Automation 
   Automation reports that show the level of automation in the organization, client, and supplier. Divided into workflow, auto-posting, and accounting parameters.
2. Role: Invoice Statistics 
   Number of invoices from different suppliers and document types.

Other

1. Role: Purchase Order Overview 
   Access to a list of all purchase orders synchronized into SEMINE.

2. Role: DocFlow

   Provides access to DocFlow, where incoming invoices from multiple channels such as upload, email, API, and PEPPOL can be received, monitored, and managed.
   
   Users can track invoice status, review documents, and handle failed or suspended invoices before processing in SEMINE.
   
   DocFlow – Semine