METRC User Access and Permissions Management

Question 1

In METRC, who has the authority to create new employee user accounts for a licensed facility?

Accepted Answer

The facility administrator assigned to that license in METRC

Answer

Facility administrators are responsible for managing user accounts within their licensed facility in METRC. This includes creating new accounts, assigning roles, and deactivating accounts for departed employees.

Question 2

An employee leaves a cannabis company. What must the facility do in METRC?

Accepted Answer

Immediately deactivate the former employee's METRC account to prevent unauthorized access

Answer

Prompt deactivation of departing employees' METRC accounts is a critical security and compliance requirement. Failure to do so leaves the facility vulnerable to unauthorized transactions and creates liability for actions taken using the former employee's credentials.

Question 3

Which METRC user role typically has view-only access and cannot create, edit, or delete records?

Accepted Answer

A 'Viewer' or read-only user role assigned by the facility administrator

Answer

METRC supports role-based access levels, including view-only access for users who need to see records for reporting or oversight purposes but should not be able to modify any inventory, transfer, or plant data.

Question 4

Why is it a compliance risk for multiple employees to share a single METRC login?

Accepted Answer

It prevents the system from creating an accurate audit trail linking specific transactions to the individual who performed them

Answer

METRC maintains a transaction log that attributes every action to a specific user account. When employees share credentials, regulators cannot determine who performed a given action, undermining accountability and making audit responses very difficult.

Question 5

A METRC facility administrator wants to allow a new budtender to process retail sales but NOT create or modify packages. What should they do?

Accepted Answer

Assign the employee a role with sales permissions only, limiting their access to the retail/sales module

Answer

METRC's role-based access system allows administrators to grant granular permissions. Assigning a role scoped to sales functions prevents accidental or unauthorized changes to inventory packages while allowing the employee to do their job.

(METRC) Marijuana Enforcement Tracking Reporting Compliance Certification Practice Test

(METRC) Marijuana Enforcement Tracking Reporting Compliance Certification Practice Test

METRC User Access and Permissions Management