Roles and permissions reference
What each system role can do and every permission that exists.
Last updated
Permissions control every action. A role is a bundle of them. A person's access is the combination of all their roles, and the server checks it on every request.
System roles
| Role | Intended for | Highlights |
|---|---|---|
| Organisation Administrator | IT or operations staff who configure the organisation | Users, roles, departments, categories, routing and settings. No access to cases, evidence, identity or audit. |
| Chief Compliance Officer | The accountable owner of the process | All case work including restricted cases, closing, reopening, export, approvals, audit, analytics and protection. |
| Case Manager | People who triage and coordinate | View all cases, assign, update, communicate, escalate, investigation and corrective actions, analytics. |
| Investigator | People who investigate assigned cases | View assigned cases, update, communicate, notes, evidence, investigation. |
| Read-only Auditor | Internal or external auditors | View all cases, audit log and verification, analytics, users and structure. No changes. |
Note. No default role can reveal reporter identity. The identity view and approve permissions must be granted on purpose.
All permissions
| Permission | Allows |
|---|---|
| tenant.settings.manage | Change settings and holidays. |
| users.view / users.manage / users.assign_roles | See users, create and edit them, give them roles. |
| departments.view / departments.manage | See and change departments. |
| roles.view / roles.manage | See and change roles. |
| categories.view / categories.manage | See and change report categories. |
| routing.view / routing.manage | See and change routing rules. |
| audit.view / audit.verify | Read the audit log and run the integrity check. |
| cases.view_all / cases.view_assigned | See every case you are not in conflict with, or only your assigned cases. |
| cases.view_restricted | See highly confidential and restricted-executive cases. |
| cases.assign / cases.update / cases.escalate | Assign cases, change status and details, escalate. |
| cases.communicate / cases.notes | Message reporters, write notes. |
| cases.close / cases.reopen | Close and reopen cases. |
| cases.approve | Approve closure requests (never your own). |
| cases.export | Export case data. |
| evidence.view / evidence.upload | See and add evidence. |
| investigation.manage | Tasks, interviews, findings and recommendations. |
| corrective_actions.manage | Create and track corrective actions. |
| analytics.view | See analytics and export CSV. |
| protection.manage | Handle retaliation concerns and protective measures. |
| identity.view / identity.approve | Request and approve revealing a reporter's identity. |
Related guides
Still stuck?
The SLEM Technologies team can help with set-up and questions.