Accounting & Budgeting

Internal Controls: Prohibited Role Combinations

Policy 9.1.2 is in place to mitigate the inherent risks of prohibited system role combinations through the segregation of duties. The policy applies to all University of Illinois employees with the following role combinations:

iBuy Requestor with FABweb Unit Rep or Biennial Unit Contact
iBuy Approver with FABweb Unit Rep or Biennial Unit Contact
Banner Department Manager/Requestor with FABweb Unit Rep or Biennial Unit Contact
PCard Holder with FABweb Unit Rep or Biennial Unit Contact

Exception Requests

If deemed necessary for the continuation of critical business functions, an exception request may be submitted to provision an employee with a prohibited role combination.

Who to Ask

If you need assistance determining how you may remove prohibited role combinations, please contact System Offices Shared Services at sharedservices@uillinois.edu for consultation.

Policy

Section 9, Audits and Internal Control

Training

Prohibited Role Combinations Explained
Explains the purchasing and equipment management roles available and how they may be combined.
Removing Prohibited Role Combinations
Offers recommendations for removing prohibited role combinations, which must be attempted before submitting an exception request.
Separation of Duties Scenarios
Provides two examples of how purchasing and fixed asset roles can be divided among three employees while maintaining separation of duties.
Search Access by Employee
Provides directions to USCs for accessing and downloading reports from the Security Application.