Testing access control

Detailed access control is a feature exclusively available in the Enterprise subscription of PayAnalytics. Once you've set up your access control to fit your organization’s needs, it can be an important step to test the configuration, as it may involve sensitive data and visibility settings.

As an admin, you can follow these steps to test the user roles you’ve created. Before proceeding, seeDetailed access control article for more information on setting up roles.

This is a tip message.

These steps are intended for the admin to test and confirm the access restrictions before assigning them to actual users.

Steps for testing user roles:

1. Create a test user.

   • Set up a new user account with a distinct username, such as 'Test User Role'. Having set a distinct username for this testing role, will ensure that your admin access won't be disrupted.

   • Use your own email address when creating the account. The email is only needed for password recovery purposes.

2. Assign the desired user role.

   • Apply the user roles you want to verify to the newly created 'Test User Role' account.

3. Log in as the test user.

   • Log out of your admin account.

   • Log into the new 'Test User Role' account following the instructions sent to your email from bot@payanalytics.com.

Once logged in, you can explore the system from the perspective of the assigned user role. This allows you to confirm that the restrictions and permissions are functioning as expected (both restricted features of the system and access to specific datasets or data points).

Evaluating the impact of different user roles

To simulate the impact of the different user roles that you create in the system, beqom recommends that you apply the following strategy.

In this scenario, you are a super admin and you want to test the impact on a specific configuration. To do this, the most efficient method is to assign the role to yourself. To do this, proceed as follows:

1. Make sure that the newly created role has admin rights. Crucially, ensure that the permission Grant access to create and modify users is enabled for the role during the test. This ensures that you will be able to revert your changes and will not be blocked when the test is over.

2. Assign to yourself the specific role that you want to test.

3. Perform all the required tests in the platform.

4. Revert your changes. Once the testing is complete, reassign yourself the super admin role and disable the user creation/modification setting (Grant access to create and modify users) for the role.