With the right role, every member gets exactly the permissions they need for their work, and confidential content stays within a small circle. Each member of an organization has exactly one role. The roles build on each other: a Key User can do everything an Employee can, and an Admin can do everything a Key User can.
The right role for every member
Employee
For everyone contributing day to day
You see all non-confidential records, create new ones and edit the records you're responsible for or involved in. New members start with this role automatically.
What you can do
- Create records, copy them and add them from the catalog
- Edit your own records and manage them as the responsible person
Key User
For everyone steering the content
You see and edit all records, including confidential ones. This keeps you on top of everything and lets you maintain clean master data for everyone.
What's added
- Read, edit and manage all records
- Archive and restore records
- Maintain tags, categories and the risk and measure catalogs
Admin
For everyone setting up the organization
You have all Key User permissions and also set up the organization: settings, members and data import.
What's added
- Configure risk treatment, BIA settings and information classification
- Manage members and assign roles
- Import data from Excel using Data import
Who can work on a record
Regardless of role, you define on each record who looks after it and who can see it.
| Setting | What it does |
|---|---|
| Responsible | Can edit and manage the record. |
| Involved person | Can edit the record, but not manage it. |
| Confidential | Only Key Users, Admins, the responsible person and involved persons can see the record. |
Edit or manage: what's the difference?
| Permission | Covers |
|---|---|
| Edit | Title, content, tags, category, Ariadne references, links, documents, dependencies and AI suggestions |
| Manage | Responsible and involved persons, confidentiality, status, assessments and classifications, BIA, risk treatment and effectiveness reviews of measures. Anyone who can manage can also edit. |
What you can do with assets, risks, measures, information and business processes
| Action | Employee | Key User | Admin |
|---|---|---|---|
| Read | All non-confidential records. Confidential ones only as the responsible or an involved person. | ✓ | ✓ |
| Create, copy, create from catalog | ✓ | ✓ | ✓ |
| Edit | As the responsible or an involved person | ✓ | ✓ |
| Manage | As the responsible person | ✓ | ✓ |
| Archive and restore | – | ✓ | ✓ |
Archived records are read-only. The same visibility rules apply to them as to active records.
Who can change settings and master data
| Area | Read | Change |
|---|---|---|
| Tags, categories, risk and measure catalogs | Everyone | Key User, Admin |
| Risk treatment, BIA configuration, information classification | Everyone | Admin |
| Members and role assignment | Everyone | Admin |
| Data import (Excel) | Admin | Admin |
| Assessment scheme, integrations (Ariadne) | Support | Support |
Was this article helpful?
That’s Great!
Thank you for your feedback
Sorry! We couldn't be helpful
Thank you for your feedback
Feedback sent
We appreciate your effort and will try to fix the article