Roles & Permissions

Prev Next

Roles in Serenity define what users can view, create, edit, and manage within the platform. Assigning the right roles is key to ensuring users have access to the tools they need — without exposing sensitive or unnecessary data.


How Roles Work

By default, all users can:

  • Report incidents

  • Submit findings (e.g., hazards, observations)

  • Complete tasks that are explicitly assigned to them or to groups they are a member of
    (e.g., inspections, risk assessments, corrective actions)

To perform additional actions, users must be assigned one or more roles.

These include permissions for:

  • Launching new inspections or assessments

  • Monitoring open items across the organization

  • Consuming reports and dashboards

  • Managing other users' submissions or workflows

Note: Roles may require a user license. Please contact your Serenity Sales Representative for details before assigning new roles.


Assigning Roles: Users vs Groups

Roles can be assigned in two ways:

➤ At the group level (Recommended)

  • Navigate to Access Management → Groups

  • Open a group and assign roles once

  • All users in the group will inherit those roles

➤ At the individual user level

  • Navigate to Access Management → Directory

  • Click on a user’s name

  • In the Roles & Permissions section, toggle the desired roles

Best Practice: Assign roles at the group level to reduce maintenance and ensure consistency. This makes onboarding and role changes easier across departments and sites.


🔁 Inherited Permissions

If a user is in one or more groups, they’ll automatically receive all the permissions assigned to those groups. These inherited roles will appear on the user’s profile under Roles & Permissions, as shown in the screenshot below.


🛠 Managing Permissions

Admins can view, toggle, and update roles from both:

  • The Directory tab

  • The Groups tab

Role assignments are grouped by function (e.g., Environmental Health & Safety, Findings & Actions, Reporting) and include a description for each permission level.