Doc Summary 
A reference list of the roles in Symbiant V6: what each role type allows, the extra roles some modules have, and the rules for combining them.
Note: Applies to: system administrators. Roles are given to users in Set up > Users (see Assigning Roles and Divisions). The roles you see depend on the modules your site licenses.
Critical: Roles are set up by Symbiant. Views, emails and permissions depend on them. If you need a new or changed role, ask Symbiant Support.
Standard Role Types #
Most modules have the same set of roles. The prefix is the module (for example risk_admin, incident_div_viewer).
| Role type | Records | Can create | Can edit | Can delete | Dropdown lists |
|---|---|---|---|---|---|
_admin | All | Yes | Yes | Yes | Yes |
_manager | All | Yes | Yes | No | No |
_record_owner_admin | Ones they own | Yes | Own | Own | No |
_record_owner | Ones they own | Yes | Own | No | No |
_action_assignee | Ones where they have an action | No | Their actions | No | No |
_general_viewer | All | No | No | No | No |
_div_admin | Their divisions and below | Yes | Yes | Yes | Yes |
_div_manager | Their divisions and below | Yes | Yes | No | No |
_div_viewer | Their divisions and below | No | No | No | No |
Note: Exact rights can differ slightly by module and site. Check what a role can see by loading that role’s view (⋮ > Admin > Load on the module) or by testing with a user who has only that role.
Module Prefixes #
| Module | Prefix |
|---|---|
| Register Risks | risk_ |
| Universe Risks | risk_universe_ |
| Controls | control_ |
| Incidents | incident_ |
| Audit Universe and Audit Tracker | audit_ |
| Working Papers | working_papers_ |
| Monitoring Action Tracker | tracker_ |
| Survey | survey_ |
| Questionnaires | questionnaire_admin |
| DPIA | dpia_ |
| Complaints | complaint_ |
| Due Diligence | due_diligence_ |
| Supplier Due Diligence | supplier_due_diligence_ |
| SHE, SHE Actions | she_, she_actions_ |
| Document Management | dm_ |
| Workshops | workshop_ |
| BCP, BCP Resources | bcp_, bcp_resources_ |
| Business Objectives | business_objectives_ |
| Actions | generic_actions_ |
| Service Desk | service_desk_ |
| ISQM | isqm_ |
Module-Specific Roles #
| Role | Use it for |
|---|---|
incident_reporter | Staff who only report incidents. Good for limited seats. |
service_desk_reporter | Staff who only raise Service Desk tickets. |
control_survey_assignee | Users who complete control assessments. |
dm_document_owner | Document owners in Document Management (create and maintain their documents). |
tracker_findings_owner, tracker_finding_action_assignee | Owners of MAT findings and their actions. |
working_papers_assistant_auditor_assignee, working_papers_observation_assignee | Assistant auditors and owners of WP observations. |
workshop_member | Workshop participants. |
she_actions_assignee, she_actions_div_assignee | Users who complete SHE actions (all, or their divisions). |
audit_action_div_assignee | Audit action assignees limited to their divisions. |
System Roles #
| Role | What it is |
|---|---|
admin | System administrator: every module and Set up. Doesn’t receive module emails on its own. |
admin_divisional | Administrator limited to their own divisions. |
admin_add_divisional_users | Lets a divisional administrator add users in their divisions. |
ADMIN_UI | Supporting role for admin screens. Leave it to Symbiant Support. |
Rules for Combining Roles #
- One role per module. Two roles for the same module collide and the user is restricted to the lower one.
- One role in each module the user needs. Without a role for a module, the user gets “Resources are not available for your device or at your user level”.
- Divisions only limit divisional roles. A
_div_role uses the user’s divisions; other roles ignore them. - Admins and emails. A system
admingets a module’s admin emails only if they also have that module’s_adminrole. See How to Receive Module Specific Emails as System Admin. - Review regularly. The System User Details report lists every user’s roles and divisions.
