---
title: User Roles Reference
description: "A reference list of the roles in Symbiant V6: what each role type allows, the extra roles some modules have, and the rules for combining them. **Note:** **Applies to:** system administrators. Roles are given to users in **Set up >…"
url: "https://support.symbiant.co.uk/kb/user-roles-reference/"
updated: "2026-10-30"
category: System Setup
---

# User Roles Reference

A reference list of the roles in Symbiant V6: what each role type allows, the extra roles some modules have, and the rules for combining them.

**Note:** **Applies to:** system administrators. Roles are given to users in **Set up > Users** (see [Assigning Roles and Divisions](https://support.symbiant.co.uk/kb/assigning-roles-and-divisions/)). The roles you see depend on the modules your site licenses.

**Critical:** Roles are set up by Symbiant. Views, emails and permissions depend on them. If you need a new or changed role, ask Symbiant Support.

## Standard Role Types

Most modules have the same set of roles. The prefix is the module (for example `risk_admin`, `incident_div_viewer`).

| Role type | Records | Can create | Can edit | Can delete | Dropdown lists |
| --- | --- | --- | --- | --- | --- |
| `_admin` | All | Yes | Yes | Yes | Yes |
| `_manager` | All | Yes | Yes | No | No |
| `_record_owner_admin` | Ones they own | Yes | Own | Own | No |
| `_record_owner` | Ones they own | Yes | Own | No | No |
| `_action_assignee` | Ones where they have an action | No | Their actions | No | No |
| `_general_viewer` | All | No | No | No | No |
| `_div_admin` | Their divisions and below | Yes | Yes | Yes | Yes |
| `_div_manager` | Their divisions and below | Yes | Yes | No | No |
| `_div_viewer` | Their divisions and below | No | No | No | No |

**Note:** Exact rights can differ slightly by module and site. Check what a role can see by loading that role's view (⋮ > **Admin** > **Load** on the module) or by testing with a user who has only that role.

## Module Prefixes

| Module | Prefix |
| --- | --- |
| Register Risks | `risk_` |
| Universe Risks | `risk_universe_` |
| Controls | `control_` |
| Incidents | `incident_` |
| Audit Universe and Audit Tracker | `audit_` |
| Working Papers | `working_papers_` |
| Monitoring Action Tracker | `tracker_` |
| Survey | `survey_` |
| Questionnaires | `questionnaire_admin` |
| DPIA | `dpia_` |
| Complaints | `complaint_` |
| Due Diligence | `due_diligence_` |
| Supplier Due Diligence | `supplier_due_diligence_` |
| SHE, SHE Actions | `she_`, `she_actions_` |
| Document Management | `dm_` |
| Workshops | `workshop_` |
| BCP, BCP Resources | `bcp_`, `bcp_resources_` |
| Business Objectives | `business_objectives_` |
| Actions | `generic_actions_` |
| Service Desk | `service_desk_` |
| ISQM | `isqm_` |

## Module-Specific Roles

| Role | Use it for |
| --- | --- |
| `incident_reporter` | Staff who only report incidents. Good for limited seats. |
| `service_desk_reporter` | Staff who only raise Service Desk tickets. |
| `control_survey_assignee` | Users who complete control assessments. |
| `dm_document_owner` | Document owners in Document Management (create and maintain their documents). |
| `tracker_findings_owner`, `tracker_finding_action_assignee` | Owners of MAT findings and their actions. |
| `working_papers_assistant_auditor_assignee`, `working_papers_observation_assignee` | Assistant auditors and owners of WP observations. |
| `workshop_member` | Workshop participants. |
| `she_actions_assignee`, `she_actions_div_assignee` | Users who complete SHE actions (all, or their divisions). |
| `audit_action_div_assignee` | Audit action assignees limited to their divisions. |

## System Roles

| Role | What it is |
| --- | --- |
| `admin` | System administrator: every module and Set up. Doesn't receive module emails on its own. |
| `admin_divisional` | Administrator limited to their own divisions. |
| `admin_add_divisional_users` | Lets a divisional administrator add users in their divisions. |
| `ADMIN_UI` | Supporting role for admin screens. Leave it to Symbiant Support. |

## Rules for Combining Roles

- **One role per module.** Two roles for the same module collide and the user is restricted to the lower one.
- **One role in each module the user needs.** Without a role for a module, the user gets "Resources are not available for your device or at your user level".
- **Divisions only limit divisional roles.** A `_div_` role uses the user's divisions; other roles ignore them.
- **Admins and emails.** A system `admin` gets a module's admin emails only if they also have that module's `_admin` role. See [How to Receive Module Specific Emails as System Admin](https://support.symbiant.co.uk/kb/how-to-receive-module-specific-emails-as-system-admin/).
- **Review regularly.** The [System User Details report](https://support.symbiant.co.uk/kb/generating-the-system-user-details-report/) lists every user's roles and divisions.

## Related Articles

- [Assigning Roles and Divisions](https://support.symbiant.co.uk/kb/assigning-roles-and-divisions/)
- [Limiting Access of Users in Symbiant](https://support.symbiant.co.uk/kb/limiting-access-of-users-in-symbiant/)
- [Seat Types](https://support.symbiant.co.uk/kb/seat-types/)