End-to-end workflows

How work moves through Administration from start to finish, who does each step and what the system does in response.

On this page (12)

New employee gets access

Who: Admin A

#What the person doesWhat the system does
1Create the employee in HR (or use an existing test employee)Employee exists without a login
2System users > New system user > pick the employee; type Internal; Member; role 'Accountant'; Licence Professional; temporary passwordUser created; must change password
3Sign out; sign in as the new user with the temporary passwordAsked to set a new password
4Set a new password; open FinanceFinance menus match the Accountant role; other apps' menus hidden
5As Admin A open the user: Security tabSign-in recorded; 'Chose their own password' now ticked on the health score

Leaver: suspend, then archive

Who: Admin A

#What the person doesWhat the system does
1User signed in on another browserSession active
2Admin: Suspend user with reasonThe other browser is signed out at the next action; sign-in refused
3Admin: Activate userCan sign in again
4Admin: Archive user with reasonArchived; cannot sign in; still visible in history and audit

Password lockout and recovery

Who: User U, Admin A

#What the person doesWhat the system does
1Sign in as U with a wrong password 5 timesLocked: 'This account is locked after too many attempts. Try again after HH:MM UTC.'
2Admin: open U > Security tabWrong passwords 5/5; Locked until shown
3Admin: Reset passwordAutomatic lock cleared; U must change password
4U signs in with the temporary passwordAsked for a new password; then works

Role design and separation of duties

Who: Admin A, Admin B

#What the person doesWhat the system does
1Access review: set 'grants_and_approves' (or another rule) to Refuse the grantRule shows 'Refuse it'
2Give user U the first conflicting roleGranted
3Give user U the second conflicting roleRefused with the conflict message
4Admin B reviews U: Access is right as it isLast reviewed = today by Admin B
5Admin A tries to review themselfRefused: 'Somebody else has to review your access.'

Integration access with an API key

Who: Admin A

#What the person doesWhat the system does
1New system user of type Integration (no employee)Created; cannot sign in at the login page
2API keys > New key for it, limited to partner.view, 90 daysToken shown once
3Call the partners API with the tokenWorks
4Rotate the keyNew token; old works for 7 days
5Revoke the new keyRequests with it refused

Temporary access with an exception and a limit

Who: Admin A, User U

#What the person doesWhat the system does
1Exceptions: allow U 'approve' on Journal entries until tomorrowListed with Until
2Approval limit: Journal limit 1000 for UListed
3U approves a 500 journal, then a 1500 journal500 approved; 1500 refused
4After the exception date passesShows Expired; U can no longer approve

Audit protection end to end

Who: Admin A, Admin B, Auditor C

#What the person doesWhat the system does
1Alert rules: A creates a rule for 'partner.bank' telling C (C holds audit.view)Rule saved
2A changes a customer's bank accountC sees a new alert; A does not
3After 60 seconds A clicks Seal new eventsA new seal
4C clicks Verify the trailVerified, all intact
5A places a legal hold on 'partner.'Hold listed
6A proposes a disposal; A tries to approve itRefused: 'Somebody other than the person who proposed it approves a disposal.'
7B approvesDone; events under the hold were kept ('Kept by holds' count)

Company email setup

Who: Admin A, User U

#What the person doesWhat the system does
1A adds a company account (test SMTP) and a personal account for UBoth listed
2U opens Email sending'Your mail goes out as' shows U's personal account
3U sends a quotation by emailEmail arrives from U's address
4A switches U's account off (In use)U's mail now goes out from the company account

Numbering change for a new year

Who: Admin A

#What the person doesWhat the system does
1Sequences: invoice prefix INV-%(year)s-; next number 1Preview shows the year
2Create and post an invoiceNumber INV-<year>-000001
3Try to set Next number back below the last usedAllowed (warning) - confirm the next invoice does not duplicate a number; log if it does

New company set-up

Who: Superuser / Admin A

#What the person doesWhat the system does
1Create company TST01Created; standard payment terms; apps installed
2Fill company record: TRN, licence, address, defaultsSetup progress 100 % (or note what is missing)
3Create branches HQ and DXBDimension values and numbering
4Add payment methods (standard)7 methods
5Create a price list for B2B and make it ActiveQuotes for business customers use it
6Create a test user (Users) and switch to the new company as themThey see only this company

Configure an app for a business

Who: Admin A (proposer), Admin B (approver)

#What the person doesWhat the system does
1A: Applications > Purchasing > Features: turn off Reverse auctions / Tenders; Fields: Supplier reference = RequiredDraft shows changes
2A: Preview changesWhat changes listed; nothing blocked
3A: enter a reason; Propose for approvalRevision proposed; banner 'waits for approval'
4A tries to approveNot offered: 'Somebody other than its proposer approves it.'
5B approvesIn force: menus hidden, field required; Activity shows proposed and approved
6A restores the previous revision; B approvesBack to defaults

Price list in action

Who: Sales user

#What the person doesWhat the system does
1Price list for customer C: product P 90 (standard 100), 10+ at 80List Active and assigned
2Quote C for 5 PPrice 90
3Quote C for 12 PPrice 80
4Quote another customer for 5 PPrice 100
5Make the list Inactive; quote C againPrice 100