Access management (or access control) defines who can access which data and features of an information system. In an ERP, it ensures that each employee only has the rights necessary for their role, reducing the risk of errors and malicious acts.

Components of Access Management

• Authentication: Identity verification (password, two-factor authentication).
• Profiles and roles: Grouping rights by function (salesperson, accountant, HR).
• Module rights: Read-only, create, modify, or delete based on profile.
• Connection log: Access history to detect suspicious activity.

GestiumERP has a complete access management system allowing granular profiles to be defined by user, module, and operation. See also our guide on IT security in business.