Admin > General settings > General settings > Authorization and Security – ISPnext Support

Category Authorization

Enabling this option ensures that user accounts only display categories to which they are linked.

Two Factor Authentication

Two-factor authentication adds an extra security step to the login process. When you log in from an IP address that is unknown to VendorLink for your account, you must enter a security code. You will receive this security code at the e-mail address associated with the user account with which you log in.

If you have successfully logged in using 2FA, your IP address will be considered trusted for 30 days. This means that you only have to enter the security code every 30 days, and not every login attempt.

The process summarized in short steps:

You enter your login details on the VendorLink login page and click on 'Login'.
On the login page you enter the security code that you just received by e-mail.
Click on 'Login' again.

Not receiving a code? Then click on 'Resend'. Still not receiving anything? Then create a ticket.

If you want to use Two-Factor authentication, you can enable this function by clicking on 'Activate 2FA'. If you then want to disable 2FA again, simply click on 'Deactivate 2FA'.

A 'trusted zone' can be set, this means that an IP address has been specified that will be considered confidential. The use of 2FA expires for this IP address, but remains active for all other locations. A trusted zone can be requested via a support ticket.

Single sign-on settings

This setting determines whether an external ID must be entered for a user account for this user account to be used in combination with SSO.

Mobile App Access

Through this setting you can give users the opportunity to log in via the VendorLink Mobile App, which can be found in the Google Play Store and Apple AppStore. When this checkmark is unchecked, users cannot log in via the mobile application.

Block roles

Block roles are roles that can take away access to a specific page or function. For instance; if you activate the 'No Spend Projects' role, the 'Projects' page under Spend will no longer be accessible. Block roles apply to all users in the environment.

Block rol	Toelichting
No Contract Rating	Not available.
No Contracts	Hides Spend > Vendors > Select vendor > Contracts.
No Invoice efficiency cost centre group	Not available.
No Policy Compliance	Hides Spend > Policy compliance
No Spend	Hides Vendors > Select vendor > Spend
No Spend Community	Hides Spend > Spend Community
No Spend Companies	Hides Spend > Companies
No Spend Contracts	Hides Spend > Contracts and Spend > Vendors > Select vendor > Contracts
No Spend Contracts Insert	Prevents manually adding contracts from Spend > Vendors > Select vendor > Contracts
No Spend Cost Centre Groups	Hides Spend > Cost Centre Groups
No Spend inactive vendors	Hides Spend > Vendors > Inactive vendors
No Spend Invoice efficiency	Hides Spend > Policy compliance
No Spend Invoice efficiency cost centre	Not available
No Spend Orders	Hides Spend > Vendors > Orders
No Spend Projects	Hides Spend > Projects
No Spend regional volume cost centre	Not available
No Spend Workflow	Hides Spend > Process Analysis > Invoice workflow
No Vendor Rating	Hides Vendors > Select vendor > Rating
No VM Actions	Not available
No VM Agreements	Hides Vendors > Vendor agreements
No VM Complaints	Hides Vendors > Complaints
No VM Documents	Hides Vendors > Documents
No VM Meetings	Not available
No VM Notes	Hides Vendors > Notes
No VR Checklist Items	Hides Vendors > Checklist items
No VR Surveys	Not available

Default roles

Default roles are roles that can be assigned to a user (Read more about assigning roles to users here). The list of roles you can choose from when assigning roles to users can be expanded or limited here. The roles located in the left column (Available Default Roles) can be assigned to users.