Security Audit • User Guide

Role-Based Access Control & Audit Setup & User Manual

Updated 2026 5 min read

All 25 Module Guides

API Access & Integration Billing, Subscriptions & Payments Biometric Access Control Broadcast & WhatsApp Classes & Scheduling POS & E-Commerce CRM & Lead Management Custom Domain & SSL Expense Management Financial Reports & P&L Analytics Gym Core & Fitness Vertical Inventory & Equipment Member Management & Portal Mobile App & Member Portal Multi-Location Management Offers, Promotions & Referrals Personal Training Touchless QR Attendance Role-Based Access Control & Audit Real Estate Vertical Engine Analytics, Reports & Finance Social Media Marketing Staff, Payroll & Expenses Website Builder & CMS WhatsApp Automation & Messaging

1. Module Overview & Prerequisites

Protect sensitive financial and customer data. Assign role-based permissions (Receptionist, Trainer, Manager) and track an immutable audit trail of all staff edits, deletions, and payment entries.

Prerequisites Before Setup

  • Active GymFlow360 Admin account privileges
  • Configured facility location profile
  • Internet connectivity for real-time synchronization

2. Step-by-Step Configuration Walkthrough

01

Step 01: Action Procedure

Assign specific roles (Receptionist, Trainer, Manager, Accountant) to staff.

02

Step 02: Action Procedure

Set granular permissions in {module}.{action} format (e.g., billing.manage).

03

Step 03: Action Procedure

Restrict junior staff from viewing financial P&L reports or editing prices.

04

Step 04: Action Procedure

AuditLog records all sensitive data edits, deletions, and administrative actions.

3. Practical Operational Use Cases

Restricting receptionists from viewing financial P&L reports.
Auditing staff members who applied manual payment edits or deleted records.
Setting custom access permissions for branch managers vs floor trainers.

4. Key System Benefits & Capabilities

  • Employee profile management
  • Shift scheduling
  • Payroll & expense tracking
  • Performance tracking
  • Role-based permissions (RBAC)
Was this documentation guide helpful?