Users and Roles

App navigation: Admin → Users / Roles

The Users and Roles screens in the Admin menu are where administrators manage who has access to ClearGRC and what they can do. Users are assigned one or more roles, and their effective permissions are the combined union of all assigned roles.

Managing Users #

1. Navigate to Admin → Users.
2. The User list shows all registered users with their name, email, role(s), status, and license status.
3. Select + to create a new user. Complete the following fields:
   • Person Type, First Name, Last Name, Email Address.
   • Phone Number (optional).
   • Job Title and Location.
   • Reports To – the user’s direct manager.
   • Is Licensed? – toggle whether this user consumes a license seat.
   • Role(s) – assign one or more roles from the built-in role list.
4. The user receives an invitation email to set up their account via Azure AD CIAM.

[Screenshot: User creation form showing role assignment]

Managing Roles #

1. Navigate to Admin → Roles.
2. The Roles list shows all built-in and custom roles with their permission matrix.
3. Select a role to view or edit its permissions across all modules and permission types (Read, Execute, Add, Edit, Delete, Review, Approve).

[Screenshot: Role permission matrix]

Permission Inventory #

Navigate to Admin → Permission Inventory for a cross-role view of all permissions in the tenant. This is the administrator-level equivalent of the My Profile → Permissions screen available to all users.

Note: For a full description of built-in roles and permission types, see Roles and Permissions in the Getting Started section.