Skip to main content

Audit a User's Effective Access

How to Audit a User's Effective Access in Muhasib ERP

Overview

This guide will help you explain and check the actions a user can actually complete without granting unnecessary access.

Effective access is the intersection of account state, role/company rights, plan features/limits, terminal context, settings, and data prerequisites.

Who can do this

You need access to Authorized access to review users, roles, company assignments, and licence information.

Before you start

Record the user, role, company, terminal, plan, intended action, and exact missing/blocked behavior.

Before saving, check that the correct company is open and that you have permission to complete this task.

Where to find it

Back Office → User Management plus Licence Information and the affected module.

Audit a User's Effective Access

Step 1: Confirm Active User and Allow Login

Step 2: Confirm the user's assigned role

Step 3: Confirm the intended company is assigned to that role

Step 4: Check the parent module/view right

Step 5: Check the exact Add, Update, Delete, Print, Email, SMS, or custom right

Step 6: Confirm the plan includes the feature and has available capacity

Step 7: Check company/location/terminal registration and required configuration/data

Step 8: Restart/re-login after authorized role or licence changes

Step 9: Test both the permitted outcome and a prohibited control action

Check your work

Record a small access matrix showing expected versus observed results. Resolve discrepancies without broadening the role unnecessarily.

Take a moment to check your work before closing the window. This small check can save time later.

If something goes wrong

  • A hidden form and a disabled operation may have different causes.
  • Super-administrator success does not prove an ordinary role is set up correctly.

What to do next

Back to top