Security and roles
Who is allowed to do what, and who did what
As soon as more than one person works in the administration, the question is not only what the software can do but also who is allowed to do it. Rights apply per company and are enforced at database level: anyone without rights to an administration does not get that data, not even by a detour.
Above a threshold you set yourself, an action goes past a second person first. A change of bank details always goes past it, whatever the amount, because that is the classic way money ends up in the wrong account.
Two-factor authentication is mandatory for financial roles. Bank details and the keys of your payment providers are stored encrypted and are nowhere visible in plain text.
Roles per company
Someone can be the bookkeeper in one administration and have no access to another.
Four-eyes principle
Above your threshold a second person always looks along before it goes through.
Bank details secured separately
A change of account numbers always waits for approval.
Two-factor authentication
Mandatory for financial roles, without exceptions.
Active sessions
See which devices you are logged in on and revoke a session you do not recognise.
Access and erasure
GDPR requests from contacts with a full export; the statutory retention obligation takes precedence.
Why database-level rights differ from a hidden menu
Much software hides a button from whoever has no right to it, but leaves the data behind it in place. Whoever knows the screen's address or requests an export still sees another company's figures. You only notice when it goes wrong, and by then it is too late.
TelMaar enforces rights in the database itself. Every request for data is checked against who you are and which company you belong to. Whoever has no right to an administration does not get that data, not through an export, an integration or a detour in the app either.
Roles that fit how a company really works
A technician sees their own jobs and work orders, not the margin and not the bank account. A planner sees all jobs but no bookkeeping. The accountant sees the figures but may change nothing in the planning. An owner with three entities switches between companies without logging in again.
Every action that matters is recorded: who sent an invoice, who approved a discount, who deleted a customer. That log is not there for distrust, but to be able to say within a minute what happened when the accountant or a customer asks.
Frequently asked questions about this feature
Can I set per employee what they may do?
Yes, with roles per business. Someone can look along in one business and create invoices in another.
Is two-step verification mandatory?
For financial roles it is. New employees get fourteen days of grace to set it up, after which the gate closes.
Can I see afterwards who did what?
Yes. The audit trail records who made which change and when, and it cannot be erased from inside the application.
Ready to see how it works for yourself?
Start for free and discover in a few minutes why TelMaar fits your business.
Start for free