Rights granted
Seat and permission provisioning versus the order
Testing whether invited users, roles, and seat counts in the onboarding application match the signed order — including silent extras and seats that were never activated.
Onboarding is when extra seats are easiest to give away. A success manager invites the whole project team “so they can see the product”. Those invites become users. Billing may still show the contracted number. Access reviews, if they exist, start from the live directory and never see the original order.
We take the order, the invite table, and the role assignment at the moment the checklist was marked complete. Differences are classified as commercial extras, onboarding convenience, or unauthorised elevation.
Pending invites without expiry are treated as open access until they are closed. If your application cannot expire them, that is a design finding, not a sampling accident.
Who it is for
Customer-success and finance teams who discover unused seats, unpaid extras, or admin rights given during onboarding.
Typical fee note
From RM 16,000 for one product catalogue. Complex role matrices are quoted separately. Fees are quoted in writing after scoping. This page is not a checkout.
Scope we usually test
- Seat counts at onboarding completion versus the order form
- Roles assigned in the first session versus the standard matrix
- Invites sent to personal mailboxes, partners, or the vendor’s own staff
- Pending invites that never expire
- Downgrades that leave elevated roles in place
What you receive
- Seat and role tie-out for the sample
- Ageing of open invites
- List of non-customer identities admitted during onboarding
- Suggested compensating checks until configuration is changed