Rivane

Accounting
made smart

ERP Use CasesTier 1Published April 11, 2026

Budget Approval Workflow and Lock

Budget Approval Workflow and Lock for US and UK finance teams: ERP requirements, controls, audit evidence, data model, APIs, state transitions, and implementation checks.

Budget Workflow / Budget Lock is where ERP discipline either begins or breaks.

Budget Approval Workflow and Lock looks operational from far away. In a real finance team, it is a chain of assertions: the right actor started the work, the required records existed, the control policy was applied, the state change was preserved, and the outcome can be explained later without rebuilding the transaction from emails and spreadsheets.

The expected business outcome is specific: Fully approved and locked annual budget with complete approval audit trail, ensuring no unauthorized changes can be made after CFO sign-off.

The control flow a finance team actually needs.

Workflow map showing control steps, exceptions, and evidence for this ERP process.Approval Chain B...Start conditionEach Approval St...Required checksRejected Items R...Owner and SLABudget Lock Be E...System updateUnlock Require T...Exception handlingAudit packetEvidence trailException loopBudget Workflow / Budget Lock should preserve every override and rejection.
Workflow map for this ERP process, including exception handling and audit evidence.

Step 1

Approval Chain Be Configurable Per...

Step 2

Each Approval Step Record Approver,...

Step 3

Rejected Items Route Back To The...

Step 4

Budget Lock Be Enforced At The Database...

Step 5

Unlock Require Two Authorized Users

The ERP surface involved.

Module

Budget Workflow / Budget Lock

Actors

Department Manager, Finance Business Partner, CFO, System Administrator

Tier

Tier 1

Finance area

Budgeting, Planning & FP&A

Region lens

US and UK finance teams

Publication date

April 11, 2026

Approval chain must be configurable per entity and budget version; each approval step must record approver, timestamp, and optional comment; rejected items must route back to the original submitter with the reviewer's comment; budget lock must be enforced at the database level, not only the UI (API must reject write attempts on locked versions); unlock must require two authorized users (maker-checker); lock/unlock events must be logged to the audit trail with user, timestamp, and reason; locked budget must remain accessible for read and reporting.

US and UK teams have different compliance hooks, but the same control problem.

US teams usually care about clean evidence for audit support, vendor records, payment controls, tax reporting, and management review. UK teams usually care about VAT-ready records, approval evidence, digital-record discipline, and traceable postings. The country-specific details differ, but the operating pattern is the same: the ERP needs controlled records, explicit ownership, defensible state changes, and evidence that survives beyond the person who completed the task.

The control matrix.

Control areaRequirementAcceptance proof
Control 1Approval chain must be configurable per entity and budget versionGiven all departmental budgets submitted
Control 2each approval step must record approver, timestamp, and optional comment
when CFO approves the consolidated budget via POST /v1/budget-versions/{id}/approve
Control 3rejected items must route back to the original submitter with the reviewer's comment
then system locks the version preventing further writes via API (not only UI), and any subsequent write attempt returns 409 with error_code: budget_version_locked
Control 4budget lock must be enforced at the database level, not only the UI (API must reject write attempts on locked versionsunlock requires two authorized users with mandatory reason logging
Control 5unlock must require two authorized users (maker-checker
negative) when a single user attempts to unlock without a second authorizer then 403 with error_code: dual_authorization_required.
Control 6lock/unlock events must be logged to the audit trail with user, timestamp, and reasonFully approved and locked annual budget with complete approval audit trail, ensuring no unauthorized changes can be made after CFO sign-off.

Audit evidence is a chain, not a folder.

Evidence layerWhat should be preserved
Business eventOnce all departmental budgets are submitted, the consolidation workflow routes the master budget through a configured approval chain: Finance Business Partners approve their respective business units, then the CFO approves the consolidated budget. Each approver receives an email notification with a direct link to their approval queue. Approvers can request revisions, which routes the budget back to the relevant submitter. Once CFO approves, the system locks the budget version, preventing any further edits without a formal unlock request. System Administrator can unlock a budget line with mandatory reason logging and dual-authorization. Locked budget version is published to all budget-vs-actual reports.
Control rulesApproval chain must be configurable per entity and budget version; each approval step must record approver, timestamp, and optional comment; rejected items must route back to the original submitter with the reviewer's comment; budget lock must be enforced at the database level, not only the UI (API must reject write attempts on locked versions); unlock must require two authorized users (maker-checker); lock/unlock events must be logged to the audit trail with user, timestamp, and reason; locked budget must remain accessible for read and reporting.
Acceptance proof
Given all departmental budgets submitted;
when CFO approves the consolidated budget via POST /v1/budget-versions/{id}/approve;
then system locks the version preventing further writes via API (not only UI), and any subsequent write attempt returns 409 with error_code: budget_version_locked;
unlock requires two authorized users with mandatory reason logging;
(negative) when a single user attempts to unlock without a second authorizer then 403 with error_code: dual_authorization_required.
Data record
budget_approval_step { id: bas_*, budget_version_id: string, approver_role: string, approver_id: string, approved_at: timestamp, comment: string, status: enum(PENDING/APPROVED/REJECTED) };
budget_unlock_request { id: bur_*, budget_version_id: string, requester_id: string, second_authorizer_id: string, reason: string, unlocked_at: timestamp, status: enum(PENDING/APPROVED) };
(reference, product may differ).
System event
POST /v1/budget-versions/{id}/submit;
POST /v1/budget-versions/{id}/approve { comment } -> 200 { status: APPROVED };
POST /v1/budget-versions/{id}/lock;
POST /v1/budget-versions/{id}/unlock-requests { reason } -> 201;
POST /v1/budget-versions/{id}/unlock-requests/{req_id}/authorize;
emits budget.version_locked and budget.version_unlocked events.
Lifecycle state
DRAFT -> SUBMITTED -> APPROVED -> LOCKED;
guard: LOCKED enforced at API layer;
unlock requires two distinct authorized users;
all lock/unlock events logged with user, timestamp, and reason.

The useful version of this workflow is not only fast. It is inspectable. A controller, auditor, or operator should be able to move from source event to system record to state transition to final business outcome without guessing.

Implementation contracts.

Reference data model

`budget_approval_step` { id: bas_*, budget_version_id: string, approver_role: string, approver_id: string, approved_at: timestamp, comment: string, status: enum(PENDING/APPROVED/REJECTED) }; `budget_unlock_request` { id: bur_*, budget_version_id: string, requester_id: string, second_authorizer_id: string, reason: string, unlocked_at: timestamp, status: enum(PENDING/APPROVED) }; (reference, product may differ).

API and events

`POST /v1/budget-versions/{id}/submit`; `POST /v1/budget-versions/{id}/approve` { comment } -> 200 { status: APPROVED }; `POST /v1/budget-versions/{id}/lock`; `POST /v1/budget-versions/{id}/unlock-requests` { reason } -> 201; `POST /v1/budget-versions/{id}/unlock-requests/{req_id}/authorize`; emits `budget.version_locked` and `budget.version_unlocked` events.

State transitions

`DRAFT -> SUBMITTED -> APPROVED -> LOCKED`; guard: LOCKED enforced at API layer; unlock requires two distinct authorized users; all lock/unlock events logged with user, timestamp, and reason.

Common implementation traps.

Treating the workflow as data entry

If the ERP only stores the final record, the team loses the decision trail that explains how the record became valid.

Hiding exception logic

Exceptions need owners, reason codes, and time stamps. A vague pending state is not a control.

Posting without recovery design

Retries, duplicate submissions, and partial failures must be explicit so the system does not create inconsistent records.

Skipping evidence design

A workflow that cannot produce evidence on demand will eventually push finance teams back into manual screenshots and spreadsheets.

Where Rivane fits.

Rivane is built for finance workflows where automation must stay tied to source documents, approvals, state transitions, ledger impact, reporting, and audit evidence. Use this guide as a checklist for evaluating whether an ERP workflow is merely digitized or actually controlled.

References and source basis.

These sources provide the standards, regulatory, or government context around the flow. They are included so the guide is useful to finance operators, auditors, and implementation teams, not only buyers reading software copy.

Back to ERP use cases