User Switcher and Audit

Support staff often need to see exactly what a user sees to fix a problem, and sharing passwords is unsafe. This module lets an administrator define which users may switch to which accounts, then switch and return from the web interface with a recorded reason. Every switch is logged with time, address, browser and duration, messages posted while switched are attributed correctly, and the log cannot be deleted. It extends Users, the session and the chatter, and gives auditors a clear trail.

1. 1

   Appoint the switcher administrator

   Only members of the User Switcher Administrator group can configure permissions. The group is granted from the user form. Anyone else attempting to configure gets an error.

   • Group: User Switcher Administrator
   • Granted on the user form
   • Others are refused
2. 2

   Define who may switch to whom

   On the user form the User Switcher tab lists the target accounts allowed for that user and an option to enable auditing. The Manage Switcher Permissions wizard adds or removes targets for many source users at once. Targets must be active internal users, not the same user or the superuser.

   • Field: switch target users
   • Wizard with operation, source and target users
   • Buttons: Apply, Cancel
3. 3

   Switch to another user

   The authorised user opens the switcher from the web interface, chooses a target and gives a reason. The session changes to the target and a switch log entry starts. A second switch is refused until the user returns to the original account.

   • Choose target and reason
   • Session changes to the target
   • One switch at a time
4. 4

   Work as the target with correct attribution

   While switched the audit fields keep the effective user, and chatter messages record which real person acted through the target. Company changes made during the session are also logged. The target sees normal Odoo, restricted by their own rights.

   • Audit fields keep the effective user
   • Messages record the real actor
   • Company changes logged
5. 5

   Restore or end the session

   The user restores the original account, or logs out, and the session is closed in the log with the end reason and who ended it. Duration in seconds is computed. If the original user became inactive the user is asked to sign in again.

   • Restore action
   • Ended by and end reason
   • Duration computed
6. 6

   Review the audit log

   Under User Switcher, Switch Audit Logs the manager sees each event with action (switch or restore), original and switched user, date, duration, address and browser, and can filter active ones. Records cannot be deleted and carry chatter notes.

   • Menu: Switch Audit Logs
   • Filter Active
   • Deletion is blocked

Back to version applications