Aller au contenu principal

User Groups

The User groups page within the System Administration module provides a streamlined mechanism for aggregating individual users into logical, departmental, or functional collections.

While individual Security Roles define what a user can do across the system, User Groups are frequently employed within specific operational modules to apply macro-level filtering or workflow assignment strategies.

Accessing User Groups​

Navigate to System administration > User groups.

The primary interface displays a straightforward list of all configured groups within your enterprise (e.g., ExecutiveTeam, FinanceTeam, HRTeam).

  • Name: The definitive identifier for the group.
  • Active: A boolean indicator reflecting the current operational status of the group.

Viewing Group Membership​

To audit the individuals assigned to a specific collective:

  1. Select a record in the primary grid (e.g., FinanceTeam).
  2. Click the View users button on the action toolbar.
  3. A modal dialog titled Users in group: [GroupName] will render, displaying a read-only matrix of the personnel allocated to this collective, including their USERNAME, EMAIL, and PHONE.
Group Provisioning

Personnel cannot be assigned to a User Group from this interface. The assignment is handled exclusively during individual user provisioning or modification on the Users configuration page.

Operational Application: Journal Filtering​

The primary architectural utility of User Groups extends beyond simple categorization; they act as a foundational filter in financial operations.

As detailed in the Journal Names documentation, General Ledger journal batches can be explicitly restricted to specific User Groups.

  • Scenario: If you configure a Journal Name designated for "Executive Payroll Adjustments" and bind it to the ExecutiveTeam User Group, any user assigned to the FinanceTeam or HRTeam will be categorically blocked from selecting or posting to that specific journal, regardless of their overarching security roles.

This provides a secondary, highly targeted layer of segregation of duties specifically for transactional data entry.