in one of the customers, processing of supplier invoices is handled by AP assistants, where, in a given company there is a team of AP assistants who handles the supplier invoices and perform necessary activities such as adding posting lines for non PO invoices handling variances etc.
All AP assistants in each company should have the full access to all posting proposals in the company as they are responsible for processing all posting proposals as a team.
Due to this requirement, in order to provide access to all posting proposals, all AP assistants in a given company is given super access in the invoice posting authorizers window. However, we have also defined them as acknowledges as they do not, and should not authorize any invoices
However, whenever super access is given to any person, even though the person is defined as an Acknowledger, this person gets the access to authorize any invoice Even though you are not the assigned authorizer.
This creates a risk in internal controls, becasue the AP assistant has the ability to authorize any invoice by him/herself, even though they are not supposed to authorize any invoice
This scenario is valid for not only a specific customer, but for many organizations operating in a global scale.
Therefor, this functionality appears to be a bug, because a person defined as an acknowledger already must not be able to authorize anything regardless whether the person has super access or not
Does anyone have a different idea on how to achive this business scenario ? (Please note that we cannot set AP assistant as invoice recipients, because an invoice of a given supplier could be processed by range of AP assistants as this activity is handled by a team of AP assistants)
