# Security Group - Locate all menu accessible

**URL:** <https://www.epiusers.help/t/security-group-locate-all-menu-accessible/39213>\
**Category:** Epicor ERP 9\
**Created:** [July 11, 2017, 4:29pm UTC](https://www.epiusers.help/t/security-group-locate-all-menu-accessible/39213 "2017-07-11T16:29:59Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![cchang](https://www.epiusers.help/user_avatar/www.epiusers.help/cchang/32/13056_2.png) [@cchang](https://www.epiusers.help/u/cchang)\
**Post date:** [July 11, 2017, 4:29pm UTC](https://www.epiusers.help/t/security-group-locate-all-menu-accessible/39213/1 "2017-07-11T16:29:59Z")

</div>

Is there a way to find out what are all the menu items a Security Group currently has access to? We are looking to add a user to a security group but need to find out if they have access to menu items that they shouldn’t be.

---

<div class="post-metadata">

**Author:** ![danbedwards](https://www.epiusers.help/letter_avatar_proxy/v4/letter/d/9f8e36/32.png) [@danbedwards](https://www.epiusers.help/u/danbedwards)\
**Post date:** [July 11, 2017, 5:05pm UTC](https://www.epiusers.help/t/security-group-locate-all-menu-accessible/39213/2 "2017-07-11T17:05:11Z")

</div>

You can use the menu security report but it might not be a good format for you and it will most likely take a long time to run. Just filter by group and you should get what you are looking for.

---

<div class="post-metadata">

**Author:** ![aidacra](https://www.epiusers.help/user_avatar/www.epiusers.help/aidacra/32/17997_2.png) [@aidacra](https://www.epiusers.help/u/aidacra)\
**Post date:** [July 11, 2017, 5:09pm UTC](https://www.epiusers.help/t/security-group-locate-all-menu-accessible/39213/3 "2017-07-11T17:09:52Z")

</div>

For explicit access, you can query the security table like so:

```
select * from security
where parentseccode='menu'
and entrylist like '%security_group_id_goes_here%'

```

when the entrylist has an asterisk, that means all users are allowed access _unless_ there is another restriction, like securitymgr=1 which means that only security managers are allowed access.