Role and Permissions Guide

This guide provides a breakdown of all user permissions available in the system. It is organized by functional group to help answer questions about what specific permissions allow users to do.

Note: See the attached Matrix Table file at the bottom for raw data version.
 

User Management

Permissions related to creating and managing custom user roles.

Add-on Roles

• View: View available add-on roles.
• Create: Create new add-on roles.
• Modify: Modify existing add-on roles.
• Delete: Delete existing add-on roles.

Portfolio

Permissions for managing portfolios and the companies within them.

Scorecard Tags

• View: View available scorecard tags (always enabled).
• Create: Create new scorecard tags.
• Modify: Modify existing scorecard tags.
• Delete: Delete existing scorecard tags.
• Assign: Assign existing scorecard tags to scorecards.

Team Portfolio

• View: View team portfolios that user has access to (always enabled).
• Create: Create new team portfolio (portfolio name and description).
• Modify: Modify existing team portfolio (add & remove scorecards on the team portfolio).
• Delete: Delete existing team portfolio.

Company Portfolio

• View: View all company portfolios (always enabled).
• Create: Create new company portfolio (portfolio name and description).
• Modify: Modify existing company portfolio (add & remove scorecards on the company portfolio).
• Delete: Delete existing company portfolio.
• Export Report: Generate a report that summarizes the security posture and trends of all companies within the company portfolio.

Private Portfolio

• View: View private portfolios that only the user has access to (always enabled).
• Create: Create new private portfolio (portfolio name and description).
• Modify: Modify existing private portfolio (add & remove scorecards on the private portfolio).
• Delete: Delete existing private portfolio.

Company Overview Tab

• View: View the Overview tab in all portfolios that the user has access to (always enabled).

Scorecards

Permissions related to viewing and interacting with individual company scorecards.

Issues

• View: View all issues on the scorecard.
• Export: Generate a report of all issues on the scorecard.
• Resolve: Submit resolutions for issue findings on the scorecard.

IP Domain Tags

• View: View available IP Domain tags (always enabled).
• Create: Create new IP Domain tags.
• Modify: Modify existing IP Domain tags.
• Delete: Delete existing IP Domain tags.
• Assign: Assign existing IP Domain tags to IPs or Domains of a scorecard.

Evidence Locker

• View: View available evidence in a scorecard's Evidence Locker (always enabled).
• Create: Create/Upload evidence into the user's company scorecard Evidence Locker.
• Modify: Modify existing evidence on the user's company scorecard Evidence Locker.
• Delete: Delete existing evidence on the user's company scorecard Evidence Locker.
• Grant Access: Grant access to evidence in the scorecard's Evidence Locker.

Digital Footprint

• View: View the assets within a scorecard's digital footprint (always enabled).
• Modify: Modify existing assets on a scorecard.
• Export Report: Generate a report of the digital footprint of the scorecard.

Questionnaires

Permissions for creating, sending, and managing security questionnaires.

Outgoing

• View: View sent questionnaires.
• Delete: Delete sent "Not Started" questionnaires.
• Review: Review questionnaire responses.
• Download: Download questionnaire and responses.

Incoming

• View: View received questionnaires.
• Modify: Respond to received questionnaires.
• Download: Export questionnaire and responses.

Templates

• View: View available questionnaire templates.
• Create: Create new custom questionnaire templates.
• Modify: Modify draft custom questionnaire templates.
• Delete: Delete custom questionnaire templates.
• Send Questionnaires: Send questionnaires.

Manage Collaborators

• View: View existing collaborators of the questionnaire.
• Create: Add internal collaborators for the questionnaire.
• Delete: Remove internal collaborators for the questionnaire.

Messages

• View: View available messages.
• Create: Create new messages.

Issue Findings

• View: View available issue findings on the questionnaire.
• Download Report: Download the report of issue findings related to Questionnaire.