How much can I customise user access?
In addition to being able to restrict a user's access to each module and report, within the User Role that you assign to them, you can also further restrict and grant access in the following ways:

However, you can alternatively choose not to give this permission, and instead, within the Bank Settings screen, assign a user access to view and enter bank deposits for specific bank accounts.



Note: Only users with the role of Finance Team can edit expenditure transactions (non-finance team users can edit their own purchases up until the point of receipt check).


Note: if you do make payments for specific funds from different specific bank accounts (most organisations don't), then you should set 'cross fund payment grouping' to 'disabled' within the systems settings screen and you set a 'default payment bank account' for each fund within the fund settings screen.
Bank Reconciliation - to allow users to have access to the bank reconciliation screen for all bank accounts, you can assign this within their User Role. However, you can actively choose not to give this permission in a users role, and instead within the Bank Settings screen just assign a user access to the bank reconciliation screens just for specific bank accounts.
Petty Cash - to allow users to have access to all petty cash accounts, you can assign this within their User Role. However, you can alternatively choose not to give this permission in a users role, and instead within the Bank Settings screen just assign a user access to the petty cash screen just for specific petty cash accounts.
Adjustments - any users with this permission in their User Role will be able to see this screen. There are no further options to restrict access currently.
Investments - any users with this permission in their User Role will be able to see this screen. There are no further options to restrict access currently.
Fixed Assets - any users with this permission in their user role will be able to see this screen. There are no further options to restrict access currently but the ability to submit a purchase as a Fixed Asset Purchase is set in the individual User Settings screen
Financial Reports - access to view finance reports can be set for each individual report within their User Role, except for the 'Income & Expenditure Summary (by Fund)' report where permission is set by category, enabling you to provide each user with a bespoke customised report. The report is always up to date, can be viewed from anywhere, and you can even control whether or not they can drill in to see more details (which again you can determine by category).
The 'Balance Sheet' Report automatically allows users who have access to this report to see any funds that they have permission to view at least one category for. E.g. if a user has no access to view any categories in a particular fund, then they won't see that fund on the Balance Sheet Report (and they also won't also have the 'view all' funds option available either).
For the 'Income & Expenditure Summary (by project)' report permission, you can alternatively choose not to give this permission in a user's role, and instead within the Project Settings screen just assign a user access to the specific projects you want them to see.
Furthermore, you can hide donor names from displaying for all users on your financial reports (except for the 'all transaction' reports) and show donor envelope/reference numbers instead. This option can be set within the system settings screen.
Manage Donors - any users with this permission in their user role will be able to see this screen. There are no further options to restrict access currently.
Gift Aid - any users with this permission in their user role will be able to see this screen. There are no further options to restrict access currently. Gift Aid is however broken down by fund, making it possible to manage separately for different funds.
ChurchSuite Export - any users with this permission in their user role will be able to see this screen. There are no further options to restrict access currently.
Donation Reports - access to view donation reports can be set for each individual report within a user's role. There are no further options to restrict access currently, however you can hide donor names from displaying for all users on your donation reports and show donor envelope/reference numbers instead. This option can be set within the system settings screen.
Manage Settings - access to the various settings screens is set by screen within a user's role permissions. There are no further options to restrict access currently.
Note: users with access to the User Settings screen can't alter their own role permissions.