Requirement evaluated: Segregation of duties enforcement: person who enters cannot approve, person who approves cannot process payment
For a 3-person AP team processing 1,800 invoices per month across 2 Sage Intacct entities, SAP Concur Invoice addresses segregation of duties through a tiered role architecture with non-overlapping permissions. The system defines at least four distinct Invoice roles: Invoice AP User (entry and creation of payment requests), Invoice Approver (business-user approval), Invoice Processor (final AP review and processing), and Invoice Pay Manager (monitoring and releasing payment batches). The Invoice AP User role is explicitly scoped to back-office tasks like attaching invoice images, creating payment requests, and routing to approvers — that role does not include approval authority. …
Limitations: One admin-configurable escape hatch is material for this buyer: the 'Allow Invoice Processors to Process Their Invoices' setting, if enabled, permits a processor who also submitted an invoice to process it — SAP's own documentation notes this is designed only for single-processor companies, but it must be explicitly le …