Roles
RegScale provides a number of preset roles that provide limited access to certain functionality within the system. Roles should be applied to each user to ensure least privilege access to only the role(s) necessary to perform their job functions.
| Role Name | Access Type | Module Access |
|---|---|---|
| Administrator | Create, Read, Update, Delete | Full access to all modules, Setup for their tenant, Catalogues Management as well as Workflows, Workflow Designer and Build Workflow in Subsystems |
| AssessmentUser | Create, Read, Update, Delete | Assessment Plans Module, Assessments Module, Evidence Module, Questionnaires Module, Continuous Monitoring, & Lightning Assessments |
| AssetUser | Create, Read, Update, Delete | Assets Module |
| CaseUser | Create, Read, Update, Delete | Cases Module |
| CausalAnalysisUser | Create, Read, Update, Delete | Causal Analyses Module |
| ChangeUser | Create, Read, Update, Delete | Changes Module |
| DataCallUser | Create, Read, Update, Delete | Data Calls Module |
| ExceptionUser | Create, Read, Update, Delete | Exceptions Module |
| GeneralUser | Create, Read, Update, Delete | All Modules (except Catalogues Module, Categorization Engines Module, Security Controls Modules), nor access to Setup or Admin functions |
| GlobalAdmin | Create, Read, Update, Delete | Tenant Configuration |
| IncidentUser | Create, Read, Update, Delete | Incidents Module |
| InterconnectUser | Create, Read, Update, Delete | Interconnects Module |
| IssueScreener | Create, Read, Update, Delete | This role has access to all of the same modules as Issues + Issue Screening on the Status tab of an Issue in the Issues Module. This user also has access to the causal analysis module. |
| IssueUser | Create, Read, Update, Delete | Issues Module, Causal Analysis Module |
| Maintainer | Create, Read, Update, Delete | Catalogues Module, Categorization Engines Module, Security Controls Modules, and Importer Tools as well as Workflows, Workflow Designer and Build Workflow in Subsystems, Report Builder |
| Manager | Create, Read, Update, Delete | Same as general user, ability to impersonate users on the workbench, Report Builder |
| PolicyUser | Create, Read, Update, Delete | Policy Module, Security Profiles, Assessments, Issues |
| ProgramUser | Create, Read, Update, Delete | Programs Module, Security Profiles, Capabilities Module, Assessments, Issues |
| ProjectUser | Create, Read, Update, Delete | Projects Module, Security Profiles, Security Issues, Risks, Assessments, Issues |
| ReadOnly | Read | All Modules. NOTE: This permission overrides all other module specific permissions. If you get readonly, you will lose edit permissions regardless of other module permissions assigned. |
| ReportBuilder | Create, Read, Update, Delete | Report Builder |
| ReponseAutomationUser | Create, Read, Update, Delete | Response Automation Module |
| RequestUser | Create, Read, Update, Delete | Requests Module, Assessments, Risks, Issues |
| RiskUser | Create, Read, Update, Delete | Risks Module, Issues Module |
| QuestionnaireUser | Create, Read, Update, Delete | The QuestionnaireUser role is a special role that only provides access to questionnaires that are assigned to this user role. It is designed specifically for external users to complete questionnaires. |
| SecurityPlanUser | Create, Read, Update, Delete | Security Plans Module, Security Profiles, Components Module, Evidence Module, Control Implementations Module, Issues, Assessments, Response Automation Module & Continuous Monitoring |
| SupplyChainUser | Create, Read, Update, Delete | Supply Chains Module, Security Profiles, Evidence Module, Issues Module, Assessments |
| ThreatUser | Create, Read, Update, Delete | Threat Models & Threats Modules |
Note: All users can access the Questionnaires and Tasks Modules except QuestionnaireUser. The QuestionnaireUser role is a special role that only provides access to questionnaires. It is designed specifically for external users to complete questionnaires. Users assigned the ReadOnly role have read-only access to the Tasks module.
Assign Roles
- To set a role(s) navigate to
Setup, ' Identity and Access Management' tab, and search for and/or select the user that you wish to edit by clicking the edit icon under ACTIONS. - Under Manage Roles, select the appropriate role by checking the box next to the role that will allow the least privilege access to only the role(s) necessary for the user to perform their job functions. There is no need to click Save, the role will Auto-save and a toast will appear that states "User added to role successfully."
- If the user is currently logged in, they will need to log out and back in to reset their permissions and have the new roles applied
Delete Roles
- To delete a role(s) navigate to
Setup, ' Identity and Access Management' tab, and search for and/or select the user that you wish to edit by clicking the edit icon under ACTIONS. - Under Manage Roles, select the appropriate role(s) by un-checking the box(es) next to the role that you wish for this user to no longer have. There is no need to click Save, the role will Auto-Save and a toast will appear that states "User removed from role successfully."
- If the user is currently logged in, they will need to log out and back in to reset their permissions and have the new roles applied
Updated 2 days ago