YonSuite Finance Access Audit: Find Toxic Combinations and Stale Access
Review access by role, entity and sensitive action to find conflicts across preparation, approval, payment and master maintenance.
Learning objective
Create a loop for request, approval, provisioning, periodic review and emergency-access removal.
Roles
Finance, process owners, key users, IT, consultants and internal audit
Prerequisites
- Confirm entity, period, currency, masters and access.
- Prepare approved normal and exception data.
- Define approvals, cut-off and change control.
Completion checks
- Results trace to source and accountable role.
- Quantity, amount, period and status are reviewable.
- Exceptions retain cause, approval, action and closure evidence.
Common errors
- Overwriting history and losing traceability.
- No segregation of duties.
- Testing only normal flow.
Thailand project note
Thai implementations should confirm Thai/English masters, THB and foreign currencies, Asia/Bangkok time, segregation, approvals and local retention. This covers ERP management controls only; VAT, WHT, BOI, customs and statutory-accounting conclusions require qualified Thai professional review.
Related modules
Steps
- 01
List finance roles, entity scope, data permissions and sensitive actions.
- 02
Define incompatible combinations, such as beneficiary maintenance and payment release.
- 03
Link each user, position, manager and approved request.
- 04
Identify leavers, transfers, dormant, shared and out-of-scope access.
- 05
Risk exceptions need compensating control, owner and expiry.
- 06
Quarterly, verify actual configuration, remove stale access and archive evidence.
Implementation notes
- Pilot one entity and representative period.
- Exceptions require source, owner and closure evidence.
- Menus and fields depend on current release and blueprint.
References
- YonSuite 客户成功服务 ↗用友 · Accessed: 2026-08-21 · Applicable version: 业财对账、财务管理及迁移服务官方范围；菜单以版本为准
- U9 cloud 全球产品介绍 ↗用友 · Accessed: 2026-08-21 · Applicable version: 精细核算、项目控制与分析官方范围
- 用友 U9 cloud 核心场景 ↗用友 U9 cloud · Accessed: 2026-08-21 · Applicable version: 多组织财务、供应链与制造一体化公开范围