BYstudio. CRM role matrix and access checks
Template date: 25 October 2026.
Blank working template, not a completed client audit.

CRM and plan:
Matrix version:
Access owner:
Change approver:
Roles and employee / department / group assignments:

Repeat for every role and object:
Role | Object | Record scope | Read | Create | Edit | Stages | Delete | Import | Export | Settings | Business reason

Review related records, files, applications and connection accounts separately.
Verify support for each boundary in the system and plan.
In Bitrix24, overlapping roles grant the more permissive access. Check every assignment.

Test log:
Environment | Ordinary test account | Active roles | Approved test record without customer data | Action | Expected result | Actual result | Date | Tester | Issue and owner

Scenarios:
1. Permitted work on owned records and related objects.
2. Another owner's record through a direct link.
3. An out-of-scope action.
4. Export and settings. Consequential actions only in the agreed test environment.
5. Overlapping roles through departments and groups.
6. Ownership changes, cover and removal of temporary access.

Outcome: passed / issue / not tested.
Corrections and repeat checks:
Agreed exceptions:
Outstanding issue owner and due date:
Access review after changes:

Do not include passwords or customer data.
Source: https://bystudio.ru/en/solutions/crm-access-permissions-checklist/