# Infor LN User Role and Authorization Matrix Worksheet > Source: https://netray.co/tools/infor-ln-user-role-authorization-matrix-worksheet > Publisher: Netray (netray.co), AI and integration engineering for ERP and manufacturing systems. > Section: Free Tools ## Short answer Role-by-function matrix for LN access reviews, with access level, risk rating and segregation of duties flags. ## Category infor-ln ## Erp Infor LN ## Audience - LN administrator - Internal auditor - ERP security lead ## Tool **Kind:** worksheet **Mode:** editable **Columns:** #### Role **Key:** role **Type:** text #### Business function **Key:** function **Type:** text #### Session or area **Key:** session **Type:** text #### Access level **Key:** access **Type:** select **Options:** - Display - Create - Modify - Delete - Full #### Users in role **Key:** users **Type:** number #### Risk score (1-5) **Key:** risk **Type:** number #### Exposure **Key:** exposure **Type:** number **Expr:** users * risk **Format:** integer #### SoD conflict **Key:** sod **Type:** select **Options:** - None - Possible - Confirmed #### Review status **Key:** review **Type:** select **Options:** - Not reviewed - Approved - Change requested - Removed **Rows:** **Role:** AP_CLERK **Function:** Enter supplier invoices **Session:** Invoice entry **Access:** Create **Users:** 6 **Risk:** 3 **Sod:** Possible **Review:** Approved **Role:** AP_APPROVER **Function:** Approve supplier invoices **Session:** Invoice approval **Access:** Modify **Users:** 3 **Risk:** 4 **Sod:** None **Review:** Approved **Role:** BUYER **Function:** Create purchase orders **Session:** Purchase orders **Access:** Full **Users:** 8 **Risk:** 4 **Sod:** Possible **Review:** Change requested **Role:** WH_OPERATOR **Function:** Post receipts **Session:** Receipts **Access:** Create **Users:** 14 **Risk:** 2 **Sod:** None **Review:** Not reviewed **Role:** SUPPORT_ADMIN **Function:** Maintain users and roles **Session:** User management **Access:** Full **Users:** 2 **Risk:** 5 **Sod:** Confirmed **Review:** Change requested **Totals:** #### User assignments **Key:** users **Agg:** sum **Format:** integer #### Total exposure **Key:** exposure **Agg:** sum **Format:** integer #### Highest risk score **Key:** risk **Agg:** max **Format:** integer **Summary:** #### Average exposure per row **Key:** avg_exposure **Expr:** sum_exposure / count **Format:** decimal **Notes:** Role names, sessions and scores are examples. Use your own role and session codes, and define the 1 to 5 risk scale with your auditor before scoring. ## Content **Intro:** Access reviews are easier when roles, functions and conflicts live in one table. This worksheet lets your LN administrator and the business owners walk through who can do what, rate the risk and record the decision for the auditor. **Sections:** #### How to use the matrix **Body:** Start from your roles, not from individual users. For each role list the business function it supports, the session or area it touches and the access level. Enter how many users hold the role and a risk score from 1 to 5 agreed with your auditor. Exposure multiplies the two, so a powerful role held by many people rises to the top. Set the SoD column to Possible or Confirmed where a role combines duties that should be separate, and use the review column to record the owner's decision. **Bullets:** - Review roles first, then exceptions on individual users - Agree the risk scale in writing before scoring - Record the reviewer and date outside the sheet or add a note - Re-run after every role change #### Segregation of duties basics **Body:** The classic conflicts are the ability to create a supplier and pay that supplier, to raise and approve the same purchase order, to receive goods and approve the invoice for them, and to maintain users while also posting transactions. A single role does not need to hold both halves of a pair to cause the problem: a user with two roles can. So review combinations per user as well, and treat the matrix as the first pass. Where a conflict cannot be removed for staffing reasons, document the compensating control, such as a monthly review of the transactions. #### Reading the exposure column **Body:** Exposure is a ranking aid, not a measure of loss. Sort descending and review the top rows first: these are the roles that are risky and widely held. A role with a risk of 5 and two users, such as a support administrator, may still deserve attention because of what it can do. Pair the numbers with the SoD column, and set a rule such as no Confirmed conflict stays open beyond the next review cycle. #### Common mistakes **Body:** Reviews often cover only named business roles and skip technical and support accounts, which tend to hold the broadest access. Another mistake is approving access based on job title instead of the tasks actually performed. A third is treating the review as complete once rows are marked Approved without removing the access that was rejected. Always follow decisions through to the actual role or user change, and keep evidence of it. **Cta:** If access reviews take weeks today, we can discuss how a private assistant could read your LN authorization data and prepare conflict candidates for your administrators to confirm. **Faq:** #### Is this a replacement for an LN security tool? **Answer:** No. It is a documentation and review aid. It helps you structure decisions and evidence, while the actual authorizations are maintained in LN. For large estates you may want a dedicated access governance tool. #### How do I pick a risk score? **Answer:** Agree a simple scale with internal audit, for example 1 for display only and 5 for the ability to move money or change security. Apply the same scale to every row and write the definitions down. #### How often should access be reviewed? **Answer:** At least annually for most organizations, and more often for high-risk roles. Also review after reorganizations, system upgrades and any role redesign. #### Can I paste data from an LN report? **Answer:** You can type or paste values row by row. Keep your own role and session codes, and verify them against what LN reports before using the sheet for audit evidence. ## Search terms infor ln roles and authorizations, infor ln authorization matrix excel, baan user authorization review, ln segregation of duties matrix, infor ln user access review template, erp role matrix template --- Talk to an engineer: https://netray.co/contact?intent=erp_ai | Machine catalog: https://netray.co/agent/catalog.json