Permission Guide

ADMIN:

• Admin users have full administrative access across the platform.
• Admins have access to the Settings hub.
• Admins can share dashboards with all users.
  
  

STANDARD ENHANCED:

• Standard enhanced users have read only visibility across all areas of the platform.
• They have administrative access over risks they own or contribute too.
• They can create and administer tier 2 and 3 risks underneath all other risks.
• The dashboard data is populated with all data.
• Standard enhanced users can see dashboards shared by administrators.
• Standard enhanced users can see control groups and the controls within the groups, but they cannot administer control groups.
• Standard enhanced users can link all items to other items.
  
  

STANDARD:

• Standard users see only see items they own or contribute too.
• They can create and administer tier 2 and 3 risks underneath risks they own or contribute too.
• The dashboard data is populated with data pertaining to their items.
• Standard users can see dashboards shared by administrators (but the dashboards will only contain data pertaining to their items).
• Standard users cannot see control groups.
• Standard users can only link items they own/contribute to.
  
  

READ ONLY:

• Read only users have read only access across the entire platform.
• This is tier is typically used for audit purposes.
  
  

PUBLIC:

• Public users have the ability to report an issue/incident via the report an issue/incident form.
• Public users with the Policy module can access and read published policies.
  
  

GHOST USER:

• Ghost users are users added to the platform by our tech team.
• They appear in the owners/contributors drop down lists so you can assign items to them, but they can’t access the platform until they are invited and assigned permissions.
• Ghost users are a great way to build out your platform and assign the correct ownership of items, prior to roll out.
• Once you instruct us to invite the ghost users officially and assign permissions, our system will sync their email with the email address associated with the ghost user, and the new user will assume ownership over any items assigned to their ghost identity.

You can also read our full permission guide on Notion here.