Users
Since the use of Eftsure API v2, the key user is responsible for maintaining all users in both Eftsure portal and Dynamics 365.
User configuration
Eftsure users
Eftsure has its own security and segregation of duties that allows the administrator to configure user access directly within the portal. Please refer to the Eftsure Portal user guide to understand and apply the portal security.
The administrator can create multiple users with different levels of permissions corresponding to Eftsure portal access and features in Microsoft Dynamics 365 F&O, which will also affect the number of options available in both the systems.
The key user is responsible for matching permissions between Eftsure portal and Microsoft Dynamics 365 F&O
Although generic Eftsure users could be created for multiple D365 FO users, we strongly recommend having a single Eftsure user for each D365 FO user, in order to have maximum granularity and consistent history tracking on both sides.
Generic user
On top of the previous users, a generic Eftsure service account is also recommended, to be configured in the parameters form. The generic user will be used for all Eftsure batches and all Eftsure common actions that don't require specific/elevated permissions.
Use the following buttons to test your connection:
- Ping: This first test will help confirm whether the Eftsure service is up and running
- Login: This second test will validate the user credentials in the cloud.
Request API Permissions
If username does not have API access configured in Eftsure portal, all requests will fail for this user. Unfortunately, API permission can't be granted by the administrator. Instead, log a support ticket to get API access granted to one or more users.
Roles
Our extension is shipped with 2 different types of user roles:
- Standard extended roles (accounts payable clerk, manager, CFO...)
- New Eftsure roles
We recommend using standard roles as they are usually in place before Eftsure project starts, and users will inherit new Eftsure permissions automatically. If the customer has custom roles in place, they can reuse our Eftsure roles and grant such permissions to their users.
Standard extended roles
Our extension extends the following user roles:
| Name | Description | Duties / Permissions |
|---|---|---|
| CompanyChiefExecutiveOfficer | Chief executive officer | Manager view |
| CompanyChiefFinancialOfficer | Chief financial officer | Configure Maintain Payment limit Self certification Manager view |
| PaymAccountsPayablePaymentsClerk | Accounts payable payments clerk | View |
| VendInvoiceAccountsPayableClerk | Accounts payable clerk | View |
| VendInvoiceAccountsPayableManager | Accounts payable manager | Manager view Payment limit Self certification |
| VendPurchasingAgent | Purchasing agent | View |
| VendVendorAccountManager | Vendor account manager | Manager view |
| VendVendorContactExternalAdmin | Vendor admin (external) | External vendor for vendor collaboration |
Eftsure roles
Our extension also contains the following new roles:
| Name | Description | Duties / Permissions |
|---|---|---|
| Admin | Eftsure Administrator | Maintain bank accounts Configure Maintain Payment limit Self certification Manager view |
| Key user | Eftsure Key User | Maintain bank accounts Key user Key user support |
| Manager | Eftsure Manager | Maintain bank accounts View Manager view Payment limit |
| SelfCertifier | Eftsure Self-Certifier | View Self certification |
| Support | Eftsure Support | Readonly for all vendor and Eftsure modules and tracing |
| User | Eftsure User | Maintain bank accounts View |
Granting different permissions in both D365 and Eftsure Portal will lead to inconsistencies. For example, if an AX User is granted the CFO role in AX, but a lesser role in the Eftsure portal, the self-certify button, for example, will be enabled for the AX user, but the Eftsure self-certification function will fail due to security restrictions. The Eftsure administrator is responsible for keeping user permissions in sync between both systems.
The Eftsure administrator role is targeted for our support engineers to troubleshoot your issues in UAT/Dev environments only. It has been granted the SysTracingPane privilege via code to allow us to capture traces on your environments when investigating issue(s) and when our support user is enabled. If such privilege is not appropriate for your organisation, you can remove such privilege manually in System > Security > Security Configuration and / or review our security artifacts for all roles.
The Eftsure administrator does not have self-certification permission to avoid any issues.
Duties
The following duties are available for the administrator to assign to users and roles:
| Name | Label | Description |
|---|---|---|
| PESView | Eftsure view | Gives permission to the user to view all Eftsure information (except Highest Previous Payment), such as Onboarding information, Eftsure fastTabs in vendor details and payment journal, grid icons... |
| PESMaintain | Eftsure maintain | Gives permission to the user to view Highest Previous Payment, edit all editable Eftsure information, send onboarding invitations and verification requests to vendors, create vendors from onboarding, copy vendors and bank accounts across legal entities, mass updates... |
| PESConfigure | Eftsure configure | Gives permission to the user to configure this module, mass updates |
| PESSelfCertify | Eftsure self-certify | Allows the user to bypass Eftsure verification and self-certify the vendor in order to allow payments regardless of vendor status |
| PESPaymentLimit | Eftsure payment limit | Allows the user to change the payment limit per vendor |
If a user is not granted any of these duties, this user will not be able to see any of the Eftsure fields, buttons, tabs or menu items throughout Microsoft Dynamics 365 FO.
User list
When configuring security for the features of this module, several duties are available for the Microsoft Dynamics 365 FO administrator to assign permissions to view, edit and configure the features described in this document.
This screen show a list of all active Eftsure user in your current D365 enviroment. All Eftsure user management has to be performed directly in the online portal.
Default Eftsure user permissions
D365 roles
We recommend the following role matrix between Eftsure roles and Dynamics 365 FO roles:
Additional Eftsure roles exists, but are focused on the user experience in the Eftsure portal.
Additional custom roles are not covered by this matrix.
Portal roles
For more information relating to Eftsure portal roles, please see User Roles and Permissions Matrix
It's recommended system admin to review above matrix before assigning user roles accordingly.
Customise user role configuration
Customers can customize user roles based on the available privileges. In this section, we will guide you on how to customize the Payee Check and Include features for Eftsure users.
This can only be done by D365 system administrator.
Enable vendor creation
By default, Eftsure users may not have the option to create vendors. This section will enable the Vendor button for all Eftsure users.
User role
System administration > Security > Security configuration
Privilege
Only modify the privilege if you intend to apply the change to all roles with this privilege.
