Skip to main content

Manage departments and permissions

Departments decide what members can do. Each department owns some resources (modules such as Controls, Policies, Risk Register, Trust Center or TPRM), and each user in it gets view, change and/or delete permission on them. Admins always have full access and need no department.

Where: General → Personnel → Departments, or open Departments.

Who: admins.

Create a department​

  1. Open Departments and click Create Department.
  2. Enter the Name.
  3. Under Resources, pick the modules this department owns.
  4. Under Users, Choose Member and select their Permissions. Click Add User for more people.
  5. Click Create.

Change a department​

  • Select a department, then use the Users tab to Assign User or remove someone, and the Resources tab to see what it owns.
  • Edit a department to rename it or change its resources (Update), or Delete it.

Good to know​

  • Members also get change and view access on a record they own or review, even outside their departments.
  • When someone can't open a module, the sidebar item is greyed out with "You don't have access to this module". Add the module to one of their departments.