# Permission settings usability survey

Discover whether administrators understand access choices.

If nothing was unclear or difficult, say so. Skip questions about steps you did not experience; use not applicable where appropriate.

## 1. What task were you configuring access for?

Answer: ____________________

## 2. Which permission description was unclear?

Answer: ____________________

## 3. What outcome did you expect from the setting?

Answer: ____________________

## 4. How would you check that access is correct?

Answer: ____________________

## 5. Which example would help you understand the choices?

Answer: ____________________

## Author notes / illustrative keys where applicable

1. The intended task establishes the scope an administrator is trying to enable. Interpret permission choices against that purpose without requesting confidential access lists or assuming the configuration is secure.
2. An unclear permission label exposes ambiguity about permitted actions or affected resources. Test a more concrete description; improved comprehension still requires separate verification of actual authorization behavior.
3. Expected effects reveal the administrator's mental model of a permission change. Compare that expectation with documented behavior before improving guidance; confidence cannot substitute for an enforcement check.
4. The proposed checking method shows whether administrators know how to confirm intended access. Provide an approved verification route without collecting tokens or exposing another user's private records.
5. Helpful examples should distinguish similar access choices through fictional roles and tasks. Use the identified confusion to select examples rather than presenting a realistic private permission roster.

Interpretation caution: Never collect access tokens or treat perceived clarity as proof of secure configuration.


## Illustrative finding and follow-up

Observation: Example administrators confuse viewing results with permission to edit content.

Action to test: Clarify permission descriptions and verify the actual resulting access.

Follow-up: After testing the action, revisit this original observation: Example administrators confuse viewing results with permission to edit content. Repeat the relevant experience prompts with people who encountered the change. Compare specific explanations and sample differences; do not claim causation from the before-and-after responses.