Role permissions

See also: Groups - Members

Add ons

These roles are used to provide additional functionality to other roles. They do not grant access to invoices or other objects if used alone but must be used in combination with, for example, the Approver role.

Note: It is always possible to combine multiple roles to expand the rights of group members. For example, one can choose the role of Approver and the role of Set Flag to combine the rights of these roles so that an approver can also set a flag on the invoice.

1. Role: Edit buyer reference
   This role grants access to modify the buyer reference field.
   
   
2. Role: Set Do Not Pay
   Grants access to mark the invoice as "Do Not Pay".
   
   
3. Role: Set Flag
   Allows setting and removing flags on invoices.
   
   
4. Role: Edit invoice type and PO number
   Can change the invoice from cost to purchase order and vice versa.

Admin

1. Role: Semine Connect
   Access to Semine Connect administration of integrations and sufficient access to send an invoice through the system. Read access to the organizational structure, clients, and account parameters to verify imports from external systems.
   
   
2. Role: View Administrator
   Administration and sharing of views in the invoice list and invoice lines for the entire organization.
   
   Note: The view administrator role must be assigned at the organizational level to allow the creation of views at the organizational level.
   
3. Role: Pre-registration Settings Editor
   Access to account settings for pre-registering invoices.

Approver

1. Role: Approver
   Only invoices directly assigned to the user will be available for approval.
   
   Note: Can also upload new invoices
   Invoices where the user is mentioned in a comment can be viewed, but the user can only add a new comment, not modify the invoice.
   Under "Options," the user can choose: Pause, Forward
   • Attachment
     
     • Upload new attachment
     • Delete attachment
     • Edit attachment
   • Comment
     
     • Add comment to invoice and line regardless of assignment.
       
       
       
2. Role: Approver with read access (Read Only)
   Note: Can only read invoices assigned to the user
   • Invoice
     
     • Upload new
     • Approve
     • Edit
     • Reject
     • Pause/continue
   • Invoice lines
     • Read only access
   • Attachments
     • Upload only
   • Purchase order lines
     • Add
     • Edit
     • Remove
       
       
       
3. Role: Edit accounting lines
   Allows editing accounting lines before posting.
   Note: Must be combined with another role to provide access to invoices.
   
   
   
4. Role: Approver - Read all invoices
   Same access as the Approver role, but also provides read access to all invoices in the selected statuses.
   
   Note: Can read all invoices, including those not assigned
   Note: Cannot upload new invoices
   • Invoice
     • Edit
     • Approve
     • Reject
     • Pause/Resume
   • Invoice Lines
     • Add
     • Edit
     • Remove
   • Attachments
     • Upload and delete attachments
   • Purchase Order
     • Add
     • Edit
     • Remove
   • Purchase Order Lines
     • Add
     • Edit
     • Remove

Controller

1. Role: Controller
   A controller in Semine has full access to settings and write access to all invoices.
   A controller can approve, forward, reject, and pause on behalf of others. Can edit flags. Controller also has access to "Options" - Archive, move, reanalyze invoice, cancel workflows, restart flows.
   
   
2. Role: Controller - Without invoice upload
   Same access as the controller role but without access to invoice upload.
   
   
3. Role: Controller - Read-only access
   Same access as the controller role but only read access for invoices.
   
   
4. Role: Controller Light
   Same access as the controller role but without access to settings nor authority to approve on behalf of others.

Integration

1. Role: Integration User
   Full access to all functionality in the integration API and Semine Connect administration. This is the only role needed to set up and check an integration.
   
   
2. Role: SCIM Integration
   • Users
     • Read
     • Create new
     • Deactivate
     • Remove
   • Groups
     • Read
     • Create new
     • Edit
     • Delete
     • Add user to group
     • Remove user from group
       
       
3. Role: Invoice Upload through API
   Allows the user to upload invoices through the endpoint POST .../invoicesin the integration API

Invoice only

1. Role: Invoice - Read Only
   Read-only access to all invoices. Often useful for auditors who need insight into all invoices.
   
   
2. Role: Invoice Editing
   Access to edit all fields in invoices with selected invoice statuses.
   Does not provide access to settings or similar functionalities.

Reports

1. Role: Automation
   Automation reports that show the level of automation in the organization, client, and supplier. Divided into workflow, auto-posting, and accounting parameters.
   
   
2. Role: Invoice Statistics
   Number of invoices from different suppliers and document types.

Other

1. Role: Purchase Order Overview
   Access to a list of all purchase orders synchronized into SEMINE.