With the introduction of Assessment Hierarchy, various new permissions have been implemented to allow users to perform various operations on assessments and assessment folders. These permissions can be assigned at the level from the Role Assignment screen. Click the following links to view the new permissions implemented for Assessment Hierarchy with v4.3 of the Governance Portal:
Any user must have the following permissions to perform the associated task within Assessment Hierarchy. Please note that users with the Administrator role are assigned these permissions by default. Users with the Assessment Manager role should be assigned these permissions manually, for both new and upgrading clients.
Permission
Description
View Object
Allows you to see assessment folders and their attributes.
Edit Object
Allows you to edit assessment folders and their attributes.
Add Object
Allows you to add folders.
Delete Object
Allows you to delete assessment folders.
View Role Assignment
Allows you to view the Role Assignment screen for assessments folders.
Edit Role Assignment
Allows you to make changes to the Role Assignment screen for assessments folders.
Any user must have the following permissions to perform the associated task within Assessment Hierarchy. Please note that users with the Administrator role are assigned these permissions by default. Users with the Assessment Manager role should be assigned these permissions manually, for both new and upgrading clients.
Permission
Description
View Object
Allows you to see assessment templates and their attributes.
Edit Object
Allows you to edit assessment templates and their attributes.
Add Object
Allows you to add templates.
Delete Object
Allows you to delete assessment templates.
View Role Assignment
Allows you to view the Role Assignment screen for assessments templates.
Edit Role Assignment
Allows you to make changes to the Role Assignment screen for assessments templates
Any user must have the following permissions to perform the associated task within Assessment Hierarchy. Please note that users with the Administrator role are assigned these permissions by default. Users with the Assessment Manager role should be assigned these permissions manually, for both new and upgrading clients.
Permission
Description
View Object
Allows you to see assessments and their attributes.
Edit Object
Allows you to edit assessments and their attributes.
Add Object
Allows you to add assessments with various folders.
Delete Object
Allows you to delete assessments.
View Role Assignment
Allows you to view the Role Assignment screen for assessments.
Edit Role Assignment
Allows you to make changes to the Role Assignment screen for assessments.
Any user must have the following permissions to perform the associated task within Assessment Hierarchy. Please note that users with the Administrator role are assigned these permissions by default. Users with the Assessment Manager role should be assigned these permissions manually, for both new and upgrading clients.
Permission
Description
View Object
Allows you to view questions and their attributes.
Edit Object
Allows you to edit questions and their attributes.
Any user must have the following permissions to perform the associated task within Assessment Hierarchy. Please note that users with the Administrator role are assigned these permissions by default. Users with the Assessment Manager role should be assigned these permissions manually, for both new and upgrading clients.
Permission
Description
View Object
Allows you to view responses.
Delete Object
Allows you to delete responses.
In addition to the preceding new permissions, you can assign users or user groups to a particular role via the Role Assignment screen.
Select the Default GRC context from the context menu.
Click the Workflow Management tab.
Select Assessments from the Assessment Management group.
Right-click the folder and select Folder Permission.
Alternatively, you can assign permissions to roles for assessments/assessment templates as well. Right-click the assessment/template name and select View Role Assignment.
Select the role to which you wish to assign user or user groups to, from the Choose Role drop-down list.
Click the Assign link to assign the users to that specific role. Doing so, will grant the folder permissions to that role and all users within the role will be able to access the folder.
Click the UnAssign link to remove a specific user from that role.
Note: You need to have the View Role Assignment permission to view the Role Assignment window. Having this permission does not allow you to make changes to the role assignment. To be able to make changes, you are required to have the Edit Role Assignment permission. See Add a Permission Type to a Role for more information on allowing permissions to various roles.