A useful UX audit gives a team a defensible next action. It connects a specific observation to a task, explains the likely consequence, and separates what can be fixed now from what needs research.

Below is a worked review of a fictional workspace invitation flow. It is an illustrative scenario, not client work or a usability study. Its observations are defined in the scenario so you can follow the reasoning without mistaking them for field evidence.

Download the editable audit report (Markdown) and the task-review checklist (CSV).

Define the question

The example task is: “Invite a colleague to a workspace with the intended access level, and confirm whether the invitation was sent.” The actor is a workspace owner. The scope begins at the member list and ends at confirmation or a recoverable failure.

The demonstration interface has these properties:

  1. An “Add” button opens a form with an email field and an access selector.
  2. The selector defaults to “Full,” without explaining its permissions.
  3. Submitting a valid invitation closes the form. The member list does not change and no confirmation appears.
  4. A rejected request shows “Something went wrong” and clears the form.
  5. A successful invitation appears after a page reload.

These five statements are the evidence for this exercise. They do not tell us how often real users fail, how much revenue is affected or which fix will produce a conversion lift.

Write an executive summary that makes a decision possible

For this scenario, the summary is:

The flow permits an owner to send an invitation, but does not reliably explain the access being granted or the result of submission. Resolve the unexplained access choice and missing success feedback before relying on this flow for routine administration. Preserve input on rejection and explain the appropriate recovery. The label “Add” is a secondary clarity concern; validate its interpretation in context.

Notice the order. Permission consequences and missing confirmation come before polishing a button label. The audit is helping the team choose, not treating every observation as equally urgent.

Finding 1: the access decision is unexplained

Observation: the access selector defaults to “Full” and contains no explanation of the permissions involved.

Consequence: an owner can make a consequential access decision without enough information. The scenario does not prove that anyone actually grants excessive access; it establishes that the interface provides no explanation at the point of choice.

Recommendation: explain each role in task language. Have the product and security owners decide the appropriate default. Do not choose a safer-sounding default without checking what that role really permits.

Acceptance check: for each available role, the invitation screen describes the permissions accurately and the resulting account receives the selected role. Verify that behavior with the team responsible for authorization, not only with a visual review.

Finding 2: closing the form does not confirm success

Observation: the form closes after a successful submission, but neither a message nor a new member-list item confirms the result until reload.

Consequence: the owner has no explicit evidence that the invitation was sent. Repeating the task is a plausible response, not a measured behavior in this example.

Recommendation: show a clear pending-invitation result and identify the destination address. Distinguish “invitation sent” from “colleague joined.” Those are different states.

Acceptance check: after a successful request, the owner can identify the pending invitation without reloading. Check dynamic feedback with assistive technology as well as visually; W3C explains the requirements for status messages.

Finding 3: rejection destroys useful input

Observation: a server rejection clears the form and displays an unspecified error.

Consequence: the owner must repeat data entry and has no explanation of whether retrying will help.

Recommendation: retain the entered address, identify the recoverable issue when possible, and offer an appropriate next step. Keep internal details out of the message, but make the instruction concrete enough to act on.

Acceptance check: deliberately trigger each supported rejection type. Confirm that the retained values are correct and that the recovery path works. See the design QA example for a release-level finding format.

Keep the weaker observation weaker

“Add” may be too vague. It may also be perfectly understandable next to a member list. Record the question instead of claiming that every user will be confused.

A research task could ask a participant to invite a colleague, without naming the control. Observe where they start and what they expect “Add” to do. If they complete the task easily, the label may not deserve priority over the supported feedback defects.

This distinction keeps expert review honest. An audit can find contradictions and missing information; it cannot substitute for observing the people who use the product.

Turn findings into a sequence

For this scenario, first resolve the access contract with the appropriate owners. Then add accurate success feedback and repair rejection recovery. Review the wording concern alongside other usability questions rather than blocking the entire release on it.

The report template records observation, evidence, confidence, recommendation, owner and acceptance check separately. Assign the real people in your team; the demonstration report deliberately leaves owners unassigned. Include a decision date for accepted limitations so they do not disappear into a backlog.

Avoid a single “UX score.” Three serious gaps in one important task cannot be meaningfully averaged with twenty correct decorative details. Report the tasks sampled and the limitations of the review instead.

Check whether the change helped

After implementation, repeat the same scenarios. That verifies the repair. To evaluate the experience, observe task completion with appropriate participants and compare behavior before and after where the data allows it.

Potential measures include successful invitation completion, duplicate attempts, support questions and time spent recovering from rejection. Define the event boundaries before measuring. “Form submitted” and “invitation successfully sent” should not be counted as the same event. Account for changes in audience and traffic before attributing a difference to the redesign.

Review notes

First published September 9, 2026. This fictional example and its templates are intended to be improved together. No participant results, client work or business outcomes are claimed. Tell us what needs a clearer example.