Xero User Roles, Approvals and Payment Controls Review (Defensive)
Check who can create, approve and pay.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
[VERIFY] is an editorial flag, not a blank to fill. Wherever the prompt shows [VERIFY], check that item against a reliable source before you use it.
Review controls in Xero as a defensive review of my own books; recommend controls and explain the reason for each. Users and roles: [USERS_AND_ROLES]. Approval settings for bills and payments: [APPROVAL_SETTINGS]. Bank payment authorisation method: [PAYMENT_AUTHORISATION]. Changes to supplier bank details process: [BANK_DETAILS_PROCESS]. Do not ask for passwords or bank details. Check segregation of duties (who enters, approves, pays and reconciles), shared accounts, users who left, advisors with access, two-step sign-in, controls over changed supplier bank details, and review of the audit trail. Scale controls to business size; with one person, suggest an independent monthly review by an outsider. Return a table (Finding, Risk, Evidence, Control), a leaver checklist and a quarterly routine. Mark role and setting names [VERIFY]. This explains routine bookkeeping practice and does not replace an accountant; add anything that might involve filing or penalties to my list of questions [VERIFY]. Rank the findings by how easily money could be lost, in plain words, and give the cheapest control first. Keep the leaver checklist to five steps that can be done on the last day.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.