Access
Who can get in, at what level, and when they last did.
Access is per business. Somebody who administers one business you run has no standing in another unless granted there separately.
The list shows level and last activity together, because dormant access is the access that gets exploited and it is invisible without that second column.
Where everything sits
How to work this page
Most people need read plus one area. Administrator should be rare.
Being able to see the books and being able to move money are different grants and should be held by different people wherever headcount allows.
Anyone who has not signed in for a quarter probably does not need access. Removing it is easier than explaining it later.
Not at the end of the week. The record shows exactly when access ended.
On a phone
Every figure from the desktop appears here, stacked rather than reduced. Tables scroll inside themselves so the page never moves sideways, and figures keep their separators and their alignment at every width.
Questions people actually ask
Yes, with a role that reads everything and posts adjusting entries without touching payments or payroll.
Everything they did stays, attributed to them. Removing access never removes history.