Read-only by default
The reconciliation agent has no way to write. The posting agent runs a dry calculation first, refuses duplicates and uses only the organization's own credentials.
- Account and cost centre from your rules or history
- Signed-in users of the same organization only
- Every post confirmed on the server