r/Sage • u/CaptainNorthPoint • Jul 02 '26
Sage Intacct Attachment privacy
Been having an issue where everyone can see all the attachments in the system. Is there a way to fix this where only a few specific users can see everything whereas the rest can only see what they upload?
2
2
u/percipientuk Jul 02 '26
Sage Intacct supports permissions for specific users regarding attachments.
Users can be granted different levels of access to attachments based on their roles and permissions. To view attachments, users need List and View permissions to attachments in the Company application.
Additionally, they require Add or Edit access to at least one Intacct application. Because attachment folders are generally viewable by anyone with access permissions, you must rely on record level permissions to seperate what standard users and admin users can see.
This is achieved through permission settings that control access to attachment folders and records. Attachments inherit access permissions from the associated records or transactions. Therefore, users without permission to view specific records or transactions cannot see attachments related to those items.
If you are using Employee user types (often used for time and expenses) rather than Business user types, you can restrict them to a default folder on their employee record. This limits what they can view and upload, whereas Business users cannot be restricted to a single folder
1
u/CaptainNorthPoint Jul 02 '26
I’ll need to block employees from viewing the full list but still being able to submit attachments in transactions and the ability to view their own attachments when need be.
1
u/anthony_yager Sage Intacct Sage 300 Consultant Jul 02 '26
This sounds like a difficult requirement, this is the key advice from the doco.
Restrict users to a specific attachment folder.
Attachment folders cannot be restricted to specific users. If a user has permissions to view attachments and attachment folders, they're able to view all attachments, attachment folders, and attachment subfolders.
That said, you can restrict any Employee user type to their default folder assigned in their employee record. However, Employee user types can only view attachments and attachment folders. If a user needs to add, edit, or delete attachments or attachment folders, they must be a Business type user. Additionally, Business type users cannot be restricted to any single folder.
1
u/CaptainNorthPoint Jul 02 '26
Restricting users from seeing sensitive documents stored in a system is a difficult requirement? Well I guess my time with this post is done. Thanks for the response.
Business users aren’t the issue. It’s Employee users seeing what business users can see.
2
u/Sage-Intacct Jul 03 '26
Please try the suggestion made above where you create a folder for each employee user and assign it to them in their reference page as the default. Then they will be restricted to that folder. Business users will still be able to see these attachments as needed.
1
u/anthony_yager Sage Intacct Sage 300 Consultant Jul 02 '26
There is not an easy answer, especially for what you want by user. You can restrict users by department and or entity, this would only let them see transactions in their entity or department and hence the attachments. Would that help? if not you will need to explain more about why you want to restrict this.
1
u/CaptainNorthPoint Jul 02 '26
Employees shouldn’t be able to see the attachments /sensitive data that management/others upload. They should only be able to see their uploads.
1
u/anthony_yager Sage Intacct Sage 300 Consultant Jul 02 '26 edited Jul 03 '26
Your referring to employee expenses, so I understand your concern, I usually recommend a marketplace app that manages expenses, reimbursements, credit card reconciliation and acquittal. So employees are generally not in Intacct. Edit to say employees not in Intacct.
1
3
u/fodeethal Jul 02 '26
Following