EpicorFree templatePDF, Excel, Word exportEpicor Kinetic

Epicor Kinetic User Access Request Form Template

Access requests sent by email lose detail and approvals. A standard form tells the administrator exactly which security groups to assign, who approved it and when temporary access must end.

Fill in

Live preview
Download:

Epicor Kinetic User Access Request Form Template

Epicor User Access Request

Company: Acme Precision Ltd Request type: New user Employee: Priya Nair Epicor user ID: PNAIR Department: Purchasing Manager: R. Chen Company or site: Main plant

Access requested

Security groups: Buyer group, Inventory inquiry group

Menus and functions: Purchase Order Entry, Supplier Entry (view), Part Tracker

Temporary access end date: [End date (temporary access)]

Business reason

New buyer joining the purchasing team.

Segregation of duties check

QuestionYes/NoComment
Can the user both create and approve purchase orders?
Can the user both enter and post supplier invoices and maintain supplier bank data?
Can the user adjust inventory and also approve counts?
Does the user need access to financial settings or user maintenance?

Approvals

Requesting manager / Date
Process owner / Date
Epicor administrator / Date
Date access granted / Date

Align the segregation of duties questions with your own audit requirements. This is a starting point for your access control procedure.

Access review support

Want a periodic review of Epicor security groups against your org chart? Tell us what you export.

Optional. The tool and every export work without this. No spam.

How to use the form

The requesting manager fills in the identity and access fields. The process owner confirms the roles are appropriate and the administrator grants them in the system, then records the date. Export the completed form as PDF and keep it with your access review records. For leavers, use the Disable user type and complete it the same day.

  • Request security groups, not individual menus, where you can
  • Set an end date for contractors
  • Keep the signed copy for audits

Security groups and menus

Epicor controls access through security groups combined with menu and function permissions, and a user can belong to more than one group. Because permissions accumulate, a user who moves departments can end up with old and new rights together. The change access request type exists to make administrators remove what is no longer needed rather than only adding.

Segregation of duties

The checks table flags the combinations that auditors ask about: raising and approving the same purchase, entering invoices and changing supplier bank details, adjusting stock and approving counts. If any answer is yes, record the compensating control, such as a review report. Keep the questions to those that matter in your business so the form stays quick.

Common mistakes

Copying another user's access is the most common shortcut and the most common source of excess rights. Another is forgetting to disable accounts of leavers and contractors. Review all users at least twice a year against HR records.

  • Cloning access from a colleague without review
  • No end date on contractor accounts
  • Shared logins for shop floor terminals

Frequently Asked Questions

Should the form list security groups or menus?

Prefer security groups. They are easier to review and keep consistent. Use the menu field only for exceptions, and record why the exception exists so the next review can challenge it.

How long should we keep completed forms?

Follow your audit and record retention policy. Many companies keep them for the audit cycle plus a year or more. The point is that you can show who approved each person's access.

Is this suitable for SOX or similar controls?

It supports the evidence trail, but your control design must come from your compliance team. Use the form as an input and align approvers and checks with your documented controls.

Can contractors use the same form?

Yes, choose Temporary access and set the end date. Add the sponsoring employee as manager so someone is accountable for removal.

If you need to review who can do what across hundreds of users, we can help build a private assistant that analyses your exported security data and flags risky combinations.