Internal Controls - Incompatible Profile Combination Resource Table
While there are U of I System polices in place regarding segregation of duties, there are not System-wide controls to limit many of the purchasing, equipment, and payroll profiles that employees have within various enterprise applications. When some roles are combined, it presents a segregation of duties risk. The table below may be used as a resource guide to identify role combinations that may present a segregation of duties risk.
Role combinations specifically prohibited by Business and Finance Policy 9.1.2
Cross System Roles Table
| CROSS-SYSTEM ROLES |
| FABWeb Unit Rep AND iBuy Requestor |
| FABWeb Unit Rep AND iBuy Approver |
| FABWeb Unit Rep AND P-Card Cardholder |
| FABWeb Unit Rep AND Banner Department Manager/Requestor |
Role combinations that may otherwise present a segregation of duties risk as referenced by Business and Finance Policy 9.1
Procurement -iBuy Roles Table
| Procurement - iBuy |
| iBuy Requestor AND iBuy Approver |
| iBuy Invoice Acknowledger AND iBuy Requestor AND iBuy Approver |
| iBuy Approver AND iBuy Shopper |
| iBuy Approver AND iBuy Executive Approver |
| iBuy Dept Account Coder AND iBuy Shopper |
| iBuy Dept Account Coder AND iBuy Executive Approver |
| iBuy Executive Approver AND iBuy Requestor |
| iBuy Executive Approver AND iBuy Shopper |
| iBuy Requestor AND iBuy Query Only |
| iBuy Query Only AND iBuy Shopper |
| iBuy Invoice Acknowledger AND iBuy Shopper |
| iBuy Requestor AND iBuy Shopper |
Procurement - Banner Roles Table
| Procurement - Banner |
| Department Manager/Requester AND Department Receiving |
| Department Manager/Requester AND Finance Approver |
Equipment Management Roles Table
| Equipment Management |
| Unit Rep AND Approver |
| Unit Rep/Approver AND Unit Contact |
| Unit Contact AND Unit Head |
Payroll Roles Table
| Payroll |
| Time Entry Approver Proxy AND Time Entry Superuser |
| Time Entry Superuser AND Web and/or Department Time Entry Approver |
| Time Entry Superuser AND Web and/or Department Time Entry Superuser |
| Department Time Entry Originator AND Time Entry Approver Proxy |
| Department Time Entry Originator AND Web and/or Department Time Entry Approver |
| Department Time Entry Originator AND Web and/or Department Time Entry Superuser |
| Web and/or Department Time Entry Approver AND Web and/or Department Time Entry Superuser |
| Time Entry Approver Proxy AND Web and/or Department Time Entry Approver |
| Time Entry Approver Proxy AND Web and/or Department Time Entry Superuser |
| Time Entry Approver Proxy AND Time Entry Originator Proxy |
| Department Workflow Originator AND Department Workflow Approver (ANA Roles) |
| Department Workflow Originator AND Department Workflow Proxy (ANA Roles) |
| Department Workflow Approver AND Department Workflow Proxy (ANA Roles) |
| Department Adjustment Initiator AND Department Adjustment Approver (PARIS Roles) |
