Security Settings for Billing

Security for the Billing application is based on user roles. Your system administrator determines each role's access to Billing functions and forms.

In Settings > Security > Roles, the system administrator can:

  • Grant or block access to the Billing application and Billing menu options.
  • Restrict interactive access to certain Billing options.
  • Restrict access to billing terms.
  • Block ability to delete invoices.
  • Restrict access to certain projects.
  • Restrict access to billing groups.

If your role does not have access to a Billing function, that function does not display under Billing in the Navigation menu.

Access to Billing Terms

In Settings > Security > Roles, your system administrator can control access to billing terms in a variety of ways. The first thing to check is whether or not your administrator selected Billing Terms for your security role on the Overview tab.

Is Billing Terms selected for your role? Your Access
Yes You have access to all tabs on the Billing Terms form. The selection in the Access column of the Application Record Access grid on the Record Access tab determines your level of access: read only, modify only, add or modify, or full access.
No If Billing Terms is set to Percent Complete in the Application Record Access grid on the Record Access tab, you can only access Billing Terms if your role has access to Hubs > Projects > Billing Terms.
  • On the Fees tab of the Billing Terms form, you can only enter percent complete and fee-to-date values and click Show Fee to display fee amounts.
  • On the Format tab of the Billing Terms form, you can only edit the Description field.
  • You cannot edit other fields on these tabs or display the other Billing Terms tabs.
If Billing Terms is set to None in the Application Record Access grid on the Record Access tab, you can view all information on the Billing Terms form but cannot update any of the information.

Ability to Process Final Bills from Batch Billing

Your system administrator can grant or block your role's access to process final bills by selecting or clearing the Allow Final Processing option in the Billing Security : Interactive Billing and Invoice Approvals section of the Accounting tab in Settings > Security > Roles. Your administrator might, for example, give your role access to certain functions in Batch Billing, such as processing draft bills, but block access to processing final bills.

Ability to Delete Invoices

For you and members of your role to be able to delete an invoice from Invoices on File in Interactive Billing, your system administrator must select the Allow Invoices on File to be Deleted option for your role on the Accounting tab of Settings > Security > Roles. If this option is not selected, your role cannot delete invoices. Deleting an invoice prevents you from being able to reprint or void the invoice.

Access to Projects

If your role can access the Billing application, your system administrator can still restrict your role's access to certain projects. To do so, your administrator uses the Application Record Access grid on the Record Access tab of Settings > Security > Roles.

If your firm uses multiple companies and your system administrator does not restrict your role's access by project, your billing personnel will have access to all projects that have a main billing project belonging to the active company.

Access to Projects that Belong to Billing Groups

In the Apply Project Access To section on the Record Access tab of Settings > Security > Roles, your system administrator can use the Sub Projects in Billing Groups option to control your role's access rights to projects that belong to billing groups.

This setting works as follows:

  • If your role has this option selected, you can view and edit information for all of your accessible main projects, and you can add any sub-project to which you have security access. If your role does not have access to a main project, however, you cannot view the sub-projects, regardless of your rights to access these sub-projects individually.
  • If your role does not have this option selected, but you have access rights to the main project, you can add any project as a sub-project, regardless of the security of those sub-projects.