Roles

Roles represent certain functions that people may exercise in the system, such as leader of a project or responsible for an asset (see figure below). As in the case of being included in a profile, being assigned to roles is another way for people (or groups) to automatically inherit permissions in the system, but in this case permission is only granted with the analysis of a condition or context (allow... if). Some roles only accept people, while others also accept groups of people.

 

 

Let us look at a few examples.

Example 1: A person (for example, Emma C. Sawyer) is assigned to the Responsible for Asset role for a certain laptop (see figure below). While exercising this role, the person will automatically receive permission to the Manage the Organizational Structure privilege, and thus can view and edit the properties of the asset for which they are responsible (although not of other assets).

 

 

Example 2: A person (for example, Kurt Smith) is assigned to the Leader of a Risk Manager Project role for a certain project (see figure below). While exercising this role, the person will automatically receive permission to perform the operations related to the risk analysis in the project for which they are responsible (but not for the others).

 

 

The table below contains the system roles and their respective descriptions:

Category

Role Name

Description

Accepts Groups of People?

Organization

Organizational Project Author

Person from the organization who created a new project.

No

 

Organizational Project Leader

The leader is in charge of managing the organizational projects to which they have been assigned.

No

 

Organizational Query Editor

Person or group of people that can manage queries to which they were assigned in the Organization module.

Yes

 

Organizational Report Template Editor

Person or group of people that can edit generic report templates in the Organization module. By default, this role has permissions to all privileges related to these templates.

Yes

 

Perimeter Manager

Person or group of people from the organization with the task of keeping the information on the assets in the perimeters they manage updated.

Yes

 

Responsible for Asset

Person from the organization with the task of ensuring that the assets under their responsibility are being monitored in terms of their risks and compliance with requirements internal and external to the organization.

No

 

Responsible for Business Component

Person from the organization with the task of keeping information on the business components (strategic or tactical) under their responsibility updated. If the Continuity module is enabled, the person assigned to this role will also be responsible for checking whether information related to BIA (Business Impact Analysis) processes is accurate and making any necessary corrections.

No

 

Responsible for Group of People

Person from the organization with the task of keeping the information and members of the groups of people under their responsibility updated.

No

Risk

Asset Risk Analyst

Person from the organization with the task of performing risk analyses for the questionnaires under their responsibility in the projects.

No

 

Leader or Substitute Leader of a Risk Management Project

The leader and substitute leader are responsible for managing risk projects to which they were assigned. A person can be assigned as leader, and a person or group as substitute leader.

Yes

 

Risk Project Author

Person from the organization who created a new risk management project.

No

 

Risk Query Editor

Person or group of people who may manage queries to which they were assigned in the Risk module.

Yes

Compliance

Compliance Project Author

Person from the organization who created a new compliance project.

No

 

Compliance Query Editor

Person or group of people that can manage queries to which they were assigned in the Compliance module.

Yes

 

Leader or Substitute Leader of Compliance Project

The leader and substitute leader are responsible for managing compliance projects to which they were assigned. A person can be assigned as leader, and a person or group as substitute leader.

Yes

Knowledge

Responsible for Authoritative Document

Person or group of people from the organization responsible for managing an authoritative document and its requirements.

Yes

 

Responsible for Knowledge Base

Person or group of people from the organization responsible for managing a knowledge base and its controls.

Yes

 

Responsible for Survey

Person or group of people from the organization responsible for managing a risk or compliance survey.

Yes

Workflow

Event Author

Person from the organization who registers an event in the Workflow module.

No

 

Event Coordinator

Person or group of people from the organization assigned to coordinate the activities related to an event in the Workflow module. By default, the user who performs the role of Event Author is assigned as the coordinator when an event is created.

Yes

 

Event Manager

Person or group responsible for managing all events of the type to which they were assigned. By default, they receive permission to all privileges from the Workflow module, except Access the Workflow Module, Register Events, and Export and Import Events.

Yes

 

First Reviewer

Person or group of people from the organization that were assigned to manage events in the Workflow module.

Yes

 

Involved in Event

People or groups of people from the organization who are involved in an event while it is taking place.

Yes

 

Responsible for Event

Person or group of people from the organization with permission to edit and update the Workflow events to which they were assigned. The person or group assigned to this role can also cancel and close events, as well as view queries.

Yes

 

Second Reviewer

Person or group of people from the organization that were assigned to manage events in the Workflow module.

Yes

 

Third Reviewer

Person or group of people from the organization that were assigned to manage events in the Workflow module.

Yes

 

Workflow Query Editor

Person or group of people that can manage queries to which they were assigned in the Workflow module.

Yes

Dashboard

Audience

Person or group of people who may view the charts for which they were included in the audience and add them to dashboards.

Yes

 

Dashboard Author

Person from the organization who creates a new dashboard.

No

Policy

(This role only appears if the Policy module is installed.)

Responsible for Policies

Person from the organization responsible for maintaining a policy.

No

Continuity

(These roles only appear if the Continuity module is installed.)

BIA Data Approver

Person from the organization who verifies, approves, or rejects data used to calculate the Impact Score for business components.

No

 

Contingency Staff

Primary person or group of people responsible for executing a plan in an emergency.

Yes

 

Responsible for Plan

Primary person or group of people from the organization responsible for executing a plan.

Yes

 

Responsible for Procedures

Person or group of people from the organization with the task of editing and publishing procedures used in plans.

Yes

 

Substitute Contingency Staff

Secondary person or group of people responsible for executing a plan in an emergency.

Yes

 

Substitute Responsible for Plan

Secondary person or group of people from the organization responsible for executing a plan.

Yes

ERM

(These roles only appear if the ERM solution is installed.)

Responsible for Loss Event

Person from the organization responsible for managing a loss event.

No

 

Risk Owner

Person from the organization responsible for managing an enterprise risk.

No

Dispatch

(This role only appears if the Dispatch solution is installed.)

Dispatcher

Group of people from the organization who may manage dispatch requests and occurrences, as well as assign service units.

Yes

Events

(These roles only appear if the Events solution is installed.)

Event Report Template Editor

Person or group of people that can edit generic report templates in the Events solution. By default, this role has permissions to all privileges related to these templates.

Yes

 

Responsible for Activity

Group responsible for an activity associated with a scheduled event.

Yes

Data Analytics

Dashboard Editor

Person or group of people that can manage the dashboards to which they were assigned in the Data Analytics module.

Yes