Audit a User's Effective Access

How to Audit a User's Effective Access in Muhasib ERP

Overview

This guide will help you explain and check the actions a user can actually complete without granting unnecessary access.

Effective access is the intersection of account state, role/company rights, plan features/limits, terminal context, settings, and data prerequisites.

Who can do this

You need access to Authorized access to review users, roles, company assignments, and licence information.

Before you start

Record the user, role, company, terminal, plan, intended action, and exact missing/blocked behavior.

Where to find it

Back Office → User Management plus Licence Information and the affected module.

Audit a User's Effective Access

Step 1: Confirm Active User and Allow Login

Step 2: Confirm the user's assigned role

Step 3: Confirm the intended company is assigned to that role

Step 4: Check the parent module/view right

Step 5: Check the exact Add, Update, Delete, Print, Email, SMS, or custom right

Step 6: Confirm the plan includes the feature and has available capacity

Step 7: Check company/location/terminal registration and required configuration/data

Step 8: Restart/re-login after authorized role or licence changes

Step 9: Test both the permitted outcome and a prohibited control action

Check your work

Record a small access matrix showing expected versus observed results. Resolve discrepancies without broadening the role unnecessarily.

If something goes wrong

• A hidden form and a disabled operation may have different causes.
• Super-administrator success does not prove an ordinary role is set up correctly.

Related guides

• Understand Why a Module or Action Is Unavailable
• Create a User Role
• Grant and Revoke Muhasib Permissions
• Understand Muhasib Plan Limits and Restricted Access

What to do next