AP-INVMATCH-100 · Security · Global
Assign matching-related duties to AP roles
No intent has been recorded for this step.
Where
| Menu path | Not recordedUnverified |
|---|---|
| Menu item | Not recordedUnverified |
| Form | Not recordedUnverified |
| Tables affected | Not recordedUnverified |
| Data entity | Not recordedUnverified |
| Scope | Global |
| Country or region | Not recordedUnverified |
Value
| Recommended value | Not recordedUnverified |
|---|---|
| Rationale | Not recordedUnverified |
| Decision | Not recorded |
Dependencies and access
| Prerequisites | AP-INVMATCH-030 Enable invoice matching validation |
|---|---|
| Required by | Not recorded |
| Security duty | Not recordedUnverified |
| Feature flag | Not recordedUnverified |
| Feature state | Not recorded |
Versions
| Introduced | Not recordedUnverified |
|---|---|
| Behaviour changed | Not recorded |
| Deprecated | Not recorded |
| Verified on version | Not recorded |
| Verified on date | Not recorded |
Risk and evidence
| Irreversibility | Reversible |
|---|---|
| Common pitfall | Not recordedUnverified |
| Test case | Not recordedUnverified |
| Assets | Not recorded |
Verification
Partly verified
| Verified by | Microsoft Learn invoice automation security section, checked 2026-09-27 |
|---|---|
| Environment | Not recorded |
| Note | The v0.1 step list supplied this security step. Microsoft Learn documents the Maintain vendor invoices duty on Accounts payable clerk and Accounts payable manager roles for vendor-invoice handling. That does not prove this duty alone grants invoice-matching setup access, nor the effective privileges in USMF. No role assignment was changed for this check. The exact matching-setup duty, effective role access, menu/form/table mapping and least-privilege design remain unverified; do not treat the app's read-only connector role as an AP operator role. |
| Still to check | Applies_to_country, Common_pitfall, Data_entity, Feature_flag, Form_name, Menu_item_name, Menu_path, Recommended_value, Security_duty, Tables_affected, Test_case_id, Value_rationale, Version_introduced |
Cite this record
AP-INVMATCH-100 — Assign matching-related duties to AP roles. Beyond ERP Config Atlas, snapshot 2026-10-05, partly verified. https://www.beyonderp.cloud/atlas/step/AP-INVMATCH-100