why are there manage and set up privileges in a standard view duty role
Summary:
While reviewing privilege access for our users, we have identified two privileges that are part of the View Item Redwood duty role that do not seem appropriate for View/Inquiry duty role. Can anyone explain why these two privileges called Manage Subscrption Setup and Set Up Receivables Payment Terms were provided to the View Item Redwood duty role? This flags as a concern by auditors. I can understand that without the data security policy these might not be able to impact data and that we can customize to remove the privileges if needed, but that is still extremely concerning to auditors when they see these. We don't understand why these would be provided in the first place.
0