An invoice is marked "Paid" by the accounts department. Only the ACCOUNTS and ADMIN roles have the privileges to mark this field.