METRC User Access and Permissions Management

Question 1

In METRC, who has the authority to create new employee user accounts for a licensed facility?

Accepted Answer

The facility administrator assigned to that license in METRC

Answer

Any employee who has passed the METRC certification exam

Answer

The state cannabis regulatory agency upon written request from the owner

Answer

The METRC helpdesk after the employee passes an identity verification check

Question 2

An employee leaves a cannabis company. What must the facility do in METRC?

Accepted Answer

Immediately deactivate the former employee's METRC account to prevent unauthorized access

Answer

Transfer the employee's account to a new name and reassign it to the replacement hire

Answer

Archive the account and retain it for 2 years in case of audit questions

Answer

Notify the state regulatory agency and wait for official instruction before removing access

Question 3

Which METRC user role typically has view-only access and cannot create, edit, or delete records?

Accepted Answer

A 'Viewer' or read-only user role assigned by the facility administrator

Answer

A newly certified employee who has not yet completed their first 90-day probationary period

Answer

Any user who logs in from an unregistered IP address

Answer

The state regulatory auditor account assigned to monitor the facility

Question 4

Why is it a compliance risk for multiple employees to share a single METRC login?

Accepted Answer

It prevents the system from creating an accurate audit trail linking specific transactions to the individual who performed them

Answer

METRC's software detects shared logins and automatically locks the account after the second user signs in

Answer

Shared logins cause inventory reconciliation errors because METRC calculates stock levels per user

Answer

State regulations require that login credentials be printed on the facility's posted license

Question 5

A METRC facility administrator wants to allow a new budtender to process retail sales but NOT create or modify packages. What should they do?

Accepted Answer

Assign the employee a role with sales permissions only, limiting their access to the retail/sales module

Answer

Create the account with full permissions and instruct the employee verbally not to touch the package module

Answer

Create a shared 'sales staff' login used by all budtenders to streamline the process

Answer

Contact the state regulatory agency to request a restricted user license for the employee

Question 6

What is the consequence of a facility failing to maintain accurate and current user access records in METRC?

Accepted Answer

The facility may face regulatory violations during an audit, as inactive or unauthorized accounts indicate a breakdown in internal controls

Answer

METRC will automatically suspend the facility's license until the user list is corrected

Answer

The facility loses access to METRC reporting features until user records are reconciled

Answer

There is no regulatory consequence for user management issues, as they are considered an IT matter