Roles

At the higher level, two roles are defined for all applications:

  1. Auditor This role has view-only access to all modules across the company, except for Restricted Records.
  2. Administrator The Administrator role has the authority to activate or deactivate users, manage user setup for new users, and oversee designations, departments, locations, non-system users, and users' module access settings.

Roles for System Users are categorized at the application level and are divided into following categories:

  1. General User: This role has view-only access to the application and cannot perform any actions within it.
  2. Application User: In addition to the rights of a General User, an Application User can be assigned ownership or responsibilities within the application.

Roles for Each Application:

Asset Management

  1. General User: Has view-only access to the asset register and can be an asset user.
  2. Asset User: Includes all rights of a General User and can be an asset owner. They can create and edit assets they own.
  3. Asset Manager: Possesses all rights of an Asset User, and can set up asset system features, modify asset ownership, assign assets to owners, and configure asset groups.

Document Management

  1. General User: Can view documents list, details, and view files.
  2. Document User: Holds all rights of a General User and can act as an author, owner, and approver of documents.
  3. Document Manager: Enjoys all the rights of a Document User and can assign/update document authors, owners, and approvers.

Problem Management

  1. General User: Can create Opportunity for Improvement (OFI) records and view all OFIs.
  2. Problem User: Encompasses all rights of a General User and can work on assigned OFIs.
  3. Problem Manager: Possesses all rights of a Problem User and can manage all OFIs, assign responsibilities, and approve or reject OFIs created by other Users.

Record Management

  1. General User: Has view-only access to public records.
  2. Record User: Holds all rights of a General User and can create records based on classification (public, confidential, restricted) and view records as per permissions.
  3. Record Manager: Enjoys all the rights of a Record User and can manage all records and view permissions.

Risk Management

  1. General User: Can only view the risk register, reports, and identify risks.
  2. Risk User: Encompasses all the rights of a General User and can act as a risk owner, perform analysis, assessment, action plans for risk mitigation, and assume responsibilities for controls.
  3. Risk Manager: Has all the rights of a Risk User, and can set up system features, attributes, assign/re-assign risk owners, treatment and control responsibilities. They can also import risk and control registers.

Supplier Management

  1. General User: Can only view the list of suppliers.
  2. Supplier User: Encompasses all rights of a General User and can manage assigned suppliers.
  3. Supplier Manager: Holds all rights of a Supplier User and can manage all suppliers.

Training Management

  1. General User: Has view access to Courses, Batches, and Training.
  2. Training User: Holds all rights of a General User and can manage assigned Courses, Batches, and Trainings.
  3. Training Manager: Enjoys all rights of a Training User and can manage all Courses, Batches, and Trainings.

Organization Chart

  1. General User: Can view and print the organization chart.
  2. Org Manager: Has all the rights of general user and can setup the users designation, manager and reports to designation.

LOR Management

  1. General User: Can only view the list of LORs.
  2. LOR User: Holds all rights of a General User and can manage assigned LORs and can create LORs, but these need manager approval before submission.
  3. LOR Manager: The LOR manager has all rights, allowing them to handle the LOR system and perform all its functionality.

Control Management

  1. General User: Can only view the list of Subcontrols and dosen't have access of Controls.
  2. Control User: Holds all rights of a General User and can manage Subcontrol and can view Controls.
  3. Control Manager: The Control manager has all rights, allowing them to handle the Controls and Subcontrols and perform all its functionality.

© Tofrum, 2024 • Updated: 16-12-2023
Comment or report problem with topic