Security Roles and Permissions for Payment Assistant

For Payment Assistant, create Security roles and assign permissions based on what users need to do:

  • Set up Payment Assistant

  • Configure settings, including approval tiers and notifications

  • View and create payment runs

  • Manage and approve payment runs

Tip: A solution admin can set up the roles or create a Payment Assistant admin role to help manage them.

Then, after you create the roles, you'll assign them to users.

Set up Payment Assistant Roles

Security > Role management

We recommend you create roles for:

  • Payment Assistant admin

  • Payment run creator

  • Payment run approver

Decide who will perform each task. Most organizations assign one person to create payment runs and others to approve them based on payment amounts.

Tip: If a user already has a role assigned — such as a Shared components or Accounts payable role — edit that role instead of creating a new one. A user can only have one role per feature area.

If a solution admin isn’t setting up Payment Assistant, we recommend the following permissions at minimum:

  • Payment Assistant role

    • For Payment runs tasks, select View payment runs.

    • For Configuration tasks, select Payment Assistant setup and optionally, any of the other available tasks you want them to be able to perform.

  • Shared components role

    • For Bank accounts tasks, select Bank account information and Accounts payable.

  • Accounts payable role

    • For Record tasks, select Invoices, Credit memos, and Vendors.

Minimum recommended permissions:

  • Payment Assistant role

    • For Payment runs tasks, select View payment runs and Manage payment runs.

  • Shared components role

    • For Bank accounts tasks, select Bank account information and Accounts payable.

  • Accounts payable role

    • For Record tasks, select Invoices, Credit memos, and Vendors.

Minimum recommended permissions:

  • Payment Assistant role

    • For Payment runs tasks, select View payment runs and Approve payment runs.

  • Shared components role

    • For Bank accounts tasks, select Bank account information and Accounts payable.

  • Accounts payable role

    • For Record tasks, select Invoices, Credit memos, and Vendors.

Assign Roles to Users

Security > User management

From Security, User management, open each user you've designated as an admin, payment run creator, or payment run approver. Confirm that each user has the following roles assigned:

  • Payment Assistant

  • Shared components

  • Accounts payable

You can assign only one role per feature area. If a user already has a role assigned, choose one of the following options:

  • Edit the existing role and add the permissions from the previous step.

  • Create a new role that includes the previously assigned permissions and adds the new ones for Payment Assistant.