User roles: Restrict access to Invoice Settings
For internal control reasons the 'invoice settings' section should be only accessible for certain access types. Anyone with Xero access (excl read only) can go and adjust the bank account manually entered on the invoices sent to customers.
It would be great to have this locked the same way bank account admin is for supplier payments.
-
Vidhya Jayawardena commented
Please can Xero look at adding a layer of security on the invoice setting bank details. There have been a number of fraud cases in South Africa where the accountants/bookkeepers/users have edited bank details so that the money comes to them. It would be great to provide assurance to our clients that there is an additional security measure, to protect the integrity of the invoice.
-
Nadia Bekker commented
Only to allow Adviser the full invoice option settings. Standard users and invoice only users should not have the option to edit or void an invoice if the invoice was approved and send to client.
-
Ellie hill commented
I completely agree. Hi Xero - is there any way that this can be added?