Requirement evaluated: Segregation of duties enforcement: person who enters cannot approve, person who approves cannot process payment
For a 3-person AP team at a $120M services company, SAP Concur Invoice enforces segregation of duties through three structurally separate roles assigned per user by a Company Administrator. The Invoice AP User role covers invoice creation and submission; the SAP Help Portal Permissions documentation explicitly states that the Invoice Processor role 'cannot create and submit invoices,' blocking any processor from also acting as the submitter. A separate Approver/Manager role handles the approval step; the system prevents self-approval (an approver cannot approve their own submitted documents). …
Limitations: The Approval Routing configuration includes a toggleable setting called 'Allow Invoice Processors to process their own invoices,' meaning the submitter-cannot-process control is configurable rather than permanently locked, and must be deliberately disabled to enforce the restriction. …