Data Extraction Guide
for Sage Intacct
Step-by-step instructions for your IT team to extract the required CSV files from Sage Intacct via the XML Web Services API for the V/ergent security and controls assessment. Includes Release 5 programme packs: 25 AML / Wolfsberg controls + 50 cross-system SoD rules + (SAP-only) 30 SAP-GRC-parity fraud patterns.
Recommended extraction path
Use the V/ergent extractor first. It writes CSVs to a timestamped folder under C:\Vergent\Export, then you upload that folder into the audit project.
Manual path if automated extraction is blocked
Use the required-file list below as the manual checklist. Keep filenames unchanged, leave unavailable files empty with only headers, and record any missing source in the upload notes before running the audit.
Extract-VergentSageIntacct.ps1 uses Sage Intacct's XML Web Services API to extract all 18 files. No additional PowerShell modules required — works on PowerShell 5.1+.readByQuery and read functions. V/ergent never creates, modifies, or deletes any Sage Intacct data. Disable the extraction user/sender after the assessment.| Requirement | Details | Notes |
|---|---|---|
| User Role | System Administrator or custom role with full module access | Required to query all modules including audit trail |
| Web Services Sender | SenderID + SenderPassword | Setup → Web Services → Manage Senders. Request CSA-WSDK from Sage if not enabled. |
| Company ID | Your Intacct Company ID | Displayed at Company → Company Information → Company ID |
| Multi-Entity Access | Login at top-level entity | Required to extract cross-entity configuration |
User Accounts
All Intacct users: type (Full/Web Services/Employee), admin flag, status, last login, created date
Roles & Permissions
Role definitions: name, description, subscriptions accessible
User Role Assignments
User ↔ role mappings with entity scope and assignment date
Module Permissions
Per-role, per-module access level (Full/Read/None) and dimension restrictions
Audit Trail
Object-level change history (last 90 days): action type, user, timestamp, old/new values
Login History
User login events: username, date/time, IP address, success/failure, failure reason
Accounting Periods
All periods: name, start/end, status (Open/Closed), period type
Vendor Master
All vendors: name, tax ID, bank account (masked), status, created by, last modified
Journal Entries
Manual journal entries (last 90 days): batch ID, amount, created by, approval status
AP Transactions
AP bills and invoices (last 90 days): amount, vendor, created by, approved by, status
Payments
Payment records (last 90 days): amount, vendor, created by, approved by, approval status, method
Approval Workflow Config
Workflow definitions: object type, enabled flag, minimum amount, approver role, dual-signature requirement
Web Services / API Credentials
Sender credentials: sender ID, company, permissions, created date, last rotated, last used
Platform App Connections
Marketplace/third-party apps: name, vendor, permissions granted, last reviewed date
Multi-Entity Configuration
Entity list with isolation levels (Shared/Isolated) and status
Dimension Definitions
Dimension types: name, required flag, access level, PII content flag
Custom Report Definitions
Custom reports with creator, access level, role restrictions, and sensitive data flags
Password & Security Policy
Password complexity, expiry, MFA requirement, session timeout, account lockout settings
Native coverage: 16 SoD rules (SI-SOD-001..016).
Plus the three Release 5 programme packs that run alongside this platform's audit:
- AML / Wolfsberg Programme Controls — 25 controls spanning sanctions-list cadence, PEP / KYC review, CTR / SAR filing, structuring detection, transaction-monitoring tuning. Wired into all 7 ERP connectors (skips on cloud-only audits). Guide.
- Cross-System SoD — 50 multi-ERP conflict patterns spanning SAP × Oracle × D365 × NetSuite × Sage × AWS × Azure. Detects fraud paths a single-system review will never see. Guide.
- SAP Fraud Patterns — 30 SAP-GRC-parity patterns (STAD audit-log delete, debugger replace in PROD, Z* shadow SAP_ALL, dormant SAP_ALL, posting-period unlock + GL post, etc.). Guide.
Every finding carries citations across 13 frameworks (COSO 2013, COBIT 2019, NIST CSF 2.0, ISO 27001:2022, CIS v8, SOX ITGC, SOC 2 TSC, PCI DSS v4, HIPAA, DORA, NIS2, GDPR, Kenya DPA) — 11 of 13 at ≥75% mapped coverage. See the Check Packs page for per-pack framework coverage badges.