Recommendation: Separation of Duties = Disable Transaction Checks

Giving access to the same person to enter an invoice into the system and to cut a payment is a security concern. Best practice recommends separation of duties.

For that reason we recommend withholding access to the alternate window for Mekorma Transaction Checks. This will effectively disable transaction check printing by making any checks printed unusable. The system will offer regular GP check printing but since you are printing checks on blank check stock they will not have the MICR line, signatures, or other necessary features.

Option Two: With Secure Approval Workflow Implemented, Transaction Check printing is limited to Approvers

Since Transaction checks are printed on-the-fly, we cannot send them through a workflow. However, the security rules that you have set up still apply. If you choose to give access to transaction checks, they can be printed if the following conditions hold:

  1. the GP User entering the transaction and printing is set up as an approver with a security task.
  1. the check is within the threshold level that that user is allowed to approve.
  1. only one approver is required.

If two approvers are required for the check in question, the invoice will need to be posted and the payment will need to be submitted through the Approval workflow.

The user who prints the check is recorded as the approver in the audit log.

Last option: No Security

Finally, if you do not enforce security rules in your setup, for example you use signatures only but no approvers, you will be able to print a transaction check if the user has Alternate window access.

Last modified: April 22, 2024

Need more help with this?
We value your input. Let us know which features you want to see in our products.

Was this helpful?

Yes No
You indicated this topic was not helpful to you ...
Could you please leave a comment telling us why? Thank you!
Thanks for your feedback.