Requirement evaluated: Segregation of duties enforcement: person who enters cannot approve, person who approves cannot process payment
For a 3-person AP team at a $120M multi-location services company, AvidXchange enforces segregation of duties through a layered role-and-permission architecture that spans its two core modules: AvidInvoice (invoice pre-processing and approval) and AvidPay (payment execution). The AvidSuite platform is configured with default roles that correlate to specific permissions, and the Portal Administrator has full control over what business functions are enabled or restricted for each internal user, with fully customizable roles available beyond the defaults. …
Limitations: One configuration nuance to monitor during implementation: AvidInvoice's help documentation notes that 'a user doesn't need any specific permission to approve invoices in the system; any invoice in a user's approval queue should be valid to approve,' which means the SoD control for the entry-vs.-approval separation is …