When there is an issue with authorisation and you need to check how the structure is set up, you cannot access Maintain Authorisation Rules while users are in the program.  Checking in test database doesnt show all of the usernames if those users dont have access.  A quick and easy solutions is to have a form called View Authorisation Rules, so you can see the rules (like View System Settings) without having to kick everyone out,