Two-person approval for payments
In shortSplit a payment across two people: one initiates, another approves. Nobody moves company money on their own unless you want them to.
The Initiate and Approve roles are designed to be used together. One team member creates and submits a payment; a different team member releases it. Neither can complete a payment alone.
It is the simplest control a company can put on outgoing money, and it costs nothing but assigning two people instead of one.
| Role | Can create a payment | Can release a payment |
|---|---|---|
| Initiate a transaction | Yes | No |
| Approve a transaction | No | Yes |
| Admin | Yes | Yes |
| View only | No | No |
Give one person both roles and the control disappears. An Admin can do both by design, so a payment they create needs nobody else. Keep at least one approver who is not the person raising payments.
Related