How to see a user's effective permissions

What is it for?

The X-ray shows, for each profile in the product, what people with that profile can view, edit, create and delete. It helps you decide who gets each profile and prove, to whoever asks, that each person only reaches what they need (for example, who reads individual salaries or health data).

The X-ray answers per profile, not per person. To know what a specific person sees, find out their profiles on the user form or with View as… and read those profiles here.

The X-ray only consults: it does not change any permission.

When to use it?

• To review, once a year or before an audit, who has access to what.
• To confirm, before giving a profile to someone, what that profile allows.
• To give the data protection officer a PDF with the issue date.

Where to find it?

Accounting › Configure › Security and data › Permissions X-ray.

The system administrator also opens it with the Open the X-ray button, in the Settings, Security and communication section.

Before you start

• The profile is Fiscal administration or the system administrator. Done on 3 November 2026 with both.
• The Accountant, the Certified accountant, Management and the Auditor do not have the menu. Management is left out, although many people expect it to see it.
• To give the profile to someone: Settings › Users & Companies › Users, open the person, Advanced settings tab, field Invoicing, accounting and tax levels, choose Fiscal administration and save (see profiles and permissions).

How to use it

1. Open Accounting › Configure › Security and data › Permissions X-ray. The period defaults to the current year (01/01/2026 – 31/12/2026). The list opens with the 27 profiles collapsed and the columns Views, Edits, Creates, Deletes and Limit: the numbers say how many record types the profile reaches.
2. Find the profile, for example Localização PT — Gerência / Gerência, and click the ▸ arrow to the left of the name. The line expands below.
3. Read the four Summary lines: Invoicing, Accounting and tax, Individual salaries and Health data. Each says Yes or — in each column and, in Limit, Company records only where the profile has access.
4. Click the arrow of an area further down (for example Invoicing) to see each record type.
5. To keep evidence, expand the profiles you want to show and click Export PDF. The file carries the company, the NIF, the period, the issue date and who issued it.

Expected result

In the Management profile, the summary shows Yes only in the Views column of Invoicing, Accounting and tax and Individual salaries, and — in Health data: in those areas it is consult-only. The profile is not read-only in everything: its line has Edits 7, Creates 6 and Deletes 6, in areas such as Absence, which you see by expanding each one. The downloaded PDF is called Empresa_Demonstracao_Lda_Raio-X_de_permissoes_2026-01-01_2026-12-31.pdf.

Important notes

• The PDF contains what is expanded on screen. With everything collapsed, it only has the 27 profiles and one page; to prove what a profile does, expand it before exporting.
• The company matters. The report comes out for the active company, in the top right corner: check it before exporting.
• The X-ray shows data permissions. An action that depends on a condition (for example, who completes a return) does not appear here.

Common problems

“Nothing was shown: ask one of them for the report”

• Symptom: when opening the report from a saved link, the screen says “The permissions X-ray shows what each profile can see and edit, so only the administrator and the Fiscal Administration generate it. Nothing was shown: ask one of them for the report.”
• Cause: your profile is neither the system administrator nor Fiscal administration.
• What to do: ask one of those people to generate the X-ray and give it to you as a PDF.