User Access Control for Administrators

A security layer has been implemented in Acubiz for the administration of user master data, preventing users from editing their own profiles. This control measure supports segregation of duties requirements (the four-eyes principle) and ensures that all employees operate within the designated scope of their area of responsibility. If you need to update your own user profile, please contact a fellow administrator who can make the changes for you.

The following provisions apply to an administrator in Acubiz:

⚠️ An administrator cannot edit their own profile

To modify your own profile, a colleague with administrative privileges must perform the necessary adjustments.

If there is no other colleague with administrative rights in Acubiz, you may contact Acubiz support for assistance. Please note that this service will incur a fee.

⚠️ You can only edit users in companies you have access to

This security layer guarantees that a Pro user with administrative privileges can manage and maintain only those users to whom they have explicit access, granted through their extended rights to secondary companies.

In Acubiz, access is specified via two fields:

• Primary company
• Secondary companies

An administrator will always have access to the users who are in the administrator's own primary company. However, to gain access to users in other companies, in an organization with multiple companies, explicit access to the secondary companies must be granted.

• Read more about: Extend a user's roles to secondary companies

Example:

In an Acubiz organization with 7 companies, an administrator has access to Denmark and Sweden. The administrator can see all users, but only manages users in Denmark and Sweden..

1. ✅Denmark
2. ✅Sweden
3. 🛑Norway
4. 🛑Germany
5. 🛑Finland
6. 🛑Austria
7. 🛑Great Britain 

This is the administrator's setup:

This results in this overview of users in Acubiz.

Therefore, only users in Denmark and Sweden have access.

If the administrator tries to click on a user they do not have access to, this message appears: