---
title: "Investigation Roles & Permissions"
slug: "investigation-roles-permissions"
updated: 2025-04-29T21:05:48Z
published: 2025-04-29T21:05:48Z
canonical: "docs.serenityops.com/investigation-roles-permissions"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.serenityops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Investigation Roles & Permissions

The **Investigation Management** module in Serenity uses a role-based access model to control who can **create, view, contribute to, manage, and close investigations**. This ensures that sensitive investigations are accessible only to authorized users and that the process remains secure and auditable.

---

## Default Access

By Default, users can only participate in investigations that they are explicitly assigned to. :

| **If the user is…** | **Can view and contribute** |
| --- | --- |
| Assigned to directly | ✅ |
| Part of the assigned group | ✅ |
| Listed as an additional assignee | ✅ |
| Not involved and not in a role | ❌ |

---

## Licensed Roles for Investigation Management

In addition to default access, the following roles are in place that can allow expanded access to the investigation management application

### Investigation User (x_sehs_core.investigation_user)

- Can **launch new investigations**
- Can view and contribute to:
  - **All open investigations** in the system
  - All previously closed investigations

### Investigation Manager (x_sehs_core.investigation_manager)

- Inherits all Investigation User permissions
- Can **reopen closed investigations**
- Ideal for site leads or regional EHS staff overseeing multiple investigations

### Investigation Admin (x_sehs_core.investigation_admin)

- Inherits all Investigation Manager permissions
- Can **delete investigations** and all associated records
- Can **configure investigation settings**

---

## Role Inheritance from Incident Management

Serenity simplifies access management by tying **Investigation roles** directly to the roles used in the **Incident Management** module:

| **Incident Role** | **Inherits Investigation Role** |
| --- | --- |
| EHS User | Investigation User |
| EHS Manager | Investigation Manager |
| EHS Admin | Investigation Admin |

This means that if a user already has one of the incident management roles, they automatically gain the corresponding investigation access—no additional setup needed.