You can require independent approval for a set of sensitive actions in Payhawk. When the segregation of duties feature control is enabled, an action is held pending until it receives the required number of approvals. The person who starts the action cannot approve it, so no single person can both start and authorize a sensitive change.
Sensitive actions requiring a separate approver
Segregation of duties covers three sensitive actions:
Supplier bank detail change - a change to a supplier's payment details. Payments to that supplier are paused until the change is approved.
Same-currency transfer between accounts - an internal transfer between your own Payhawk accounts in the same currency.
FX transfer between accounts - an internal transfer between your own Payhawk accounts in different currencies. Note that the exchange rate is locked when the transfer is approved.
Eligible approvers for sensitive actions
Eligible approvers are determined by role. You can manage which roles can approve sensitive actions from your Group Dashboard > Settings > Roles and permissions. You can also exclude individual users from the eligible approvers list for a sensitive action, for example, a Payhawk Administrator who will otherwise receive a request for every change. Excluded users keep their role and permissions, but they stop receiving authorization requests for that action.
Each sensitive action that needs approval appears as an authorization request in the Payhawk Inbox of an eligible approver. An eligible approver can approve or decline the request and see how many approvals are still needed. The person who initiated the sensitive action can withdraw or cancel it while it’s still pending.
An action can only be approved by an eligible approver who did not initiate the change. For each sensitive action, you can set how many approvals are required before it can go through.
Changing the segregation of duties settings
You can manage the settings of segregation of duties in Settings > Workflows > Segregation of duties tab. For more information, see setting up segregation of duties.
A change to the segregation of duties settings is itself held until it’s approved. After you edit the settings, the system shows a Change pending approval label and marks the affected action as Pending approval until an eligible approver signs off. The new settings take effect only after approval.