Permissions
A permission is something you can do in Conform, such as view assessments, confirm controls or approve the Testing Plan. Permissions never imply each other: being able to edit something doesn't automatically mean you can view it, so roles include both.
Roles
A role is a bundle of permissions. Conform comes with:
Role | Typically for |
|---|---|
Tenant Owner | The tenancy's owner: everything. Its permissions can't be changed. |
Tenant Admin | Running the tenancy and its people, plus the day-to-day work. |
Tenant User | Doing the day-to-day work. |
Tenant Viewer | Looking, not changing. |
Workflow Owner | Changing and publishing workflows. |
Workflow Manager | Changing workflows, but not publishing them. |
You can change the built-in roles (except the Owner's) and Reset to default later. Create your own with New role, and delete them when they're unused.
The safety rules
These are enforced by Conform, whatever the screens allow:
You can only give someone a role, or add a permission to a role, if you hold every permission involved yourself.
You can't change your own roles.
The owner can't be disabled or removed, and keeps the Owner role.
Every change is recorded in the activity log.
Tenancy roles and workflow roles
Your tenancy roles decide what you can see and do across Conform. Your workflow roles decide which moves you can make on each board, and can narrow what you do at each stage. You need both.