--- title: "Roles & Permissions" slug: "roles-permissions" updated: 2026-10-06T21:33:58Z published: 2026-10-06T21:33:58Z canonical: "docs.serenityops.com/roles-permissions" --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.serenityops.com/llms.txt > Use this file to discover all available pages before exploring further. # Roles & Permissions Roles in Serenity define what users can **view**, **create**, **edit**, and **manage** within the platform. Assigning the right roles is key to ensuring users have access to the tools they need — without exposing sensitive or unnecessary data. ## How Roles Work By default, **all users** can: - Report incidents - Submit findings (e.g., hazards, observations) - Complete tasks that are **explicitly assigned** to them or to groups they are a member of *(e.g., inspections, risk assessments, corrective actions)* To perform **additional actions**, users must be assigned one or more **roles**. These include permissions for: - Launching new inspections or assessments - Monitoring open items across the organization - Consuming reports and dashboards - Managing other users' submissions or workflows **Note:** Roles may require a **user** **license**. Please contact your Serenity Sales Representative for details before assigning new roles. ## Available Roles Roles are organized into categories. Each category lists the roles that can be assigned and what they allow. | Category | Role | What It Allows | | --- | --- | --- | | Environmental, Health, & Safety | Admin | Full access to view, edit, and delete all EHS incidents and investigations. Admins can also reopen closed records. | | Environmental, Health, & Safety | Manager | View all EHS incidents and investigations and edit those that are in an open state. | | Environmental, Health, & Safety | User | View and edit open EHS incidents and investigations that are assigned to them or to one of their groups. | | Environmental, Health, & Safety | Privacy Case User | View and edit injury reports that have been classified as a privacy case. | | Findings & Actions | Admin | Full access to view, edit, and delete all findings and corrective/preventive actions. Admins can also reopen closed findings and actions. | | Findings & Actions | Manager | View all findings and actions and edit those that are in an open state. | | Findings & Actions | User | View and edit open findings and actions that are assigned to them or to one of their groups. | | Inspections | Admin | Full access to view, edit, and delete all inspections and inspection templates. | | Inspections | Manager | Reopen closed inspections and create new inspection templates. | | Inspections | User | Create and assign new inspections. Users can also view and edit open inspections that are assigned to them or to one of their groups. | | Inspections | Template Editor | Create, view, and edit all inspection templates. | | Organization Settings | Admin | Full access to create, edit, and delete establishments, processes, assets, and other organization entities. Also allows access to administer system properties and settings. | | Organization Settings | Manager | Create new establishments, processes, assets, and other organization entities. | | Organization Settings | User | View establishments, processes, assets, and other organization entities. | | Risk Assessments | Admin | Full access to view, edit, and delete all risk assessments and risk assessment templates. Admins can also reopen closed risk assessments. | | Risk Assessments | Manager | View all risk assessments and edit those that are in an open state. | | Risk Assessments | User | Create and assign new risk assessments. Users can also view and edit open risk assessments that are assigned to them or to one of their groups. | | Risk Assessments | Template Editor | Create, view, and edit reusable risk assessment templates. | **Note:** Not every category includes every role. Template Editor is available only for Inspections and Risk Assessments, and Privacy Case User is available only for Environmental, Health, & Safety. ## Assigning Roles: Users vs Groups Roles can be assigned in two ways: ### At the group level (Recommended) - Navigate to **Access Management → Groups** - Open a group - In the **Roles & Permissions** section, toggle the roles you want to assign - Select **Save**. All users in the group will inherit those roles ### At the individual user level - Navigate to **Access Management → Directory** - Click on a user’s name - In the **Roles & Permissions** section, toggle the desired roles - Select **Save** You can also add a user to a group from the **Group Membership** section of their record. **Best Practice:** Assign roles at the **group level** to reduce maintenance and ensure consistency. This makes onboarding and role changes easier across departments and sites. ![](https://cdn.us.document360.io/7951ec8a-9aa7-4a24-82dd-bc5d6b13dc78/Images/Documentation/group-roles-and-permissions.png?sv=2026-02-06&spr=https&st=2026-11-03T19%3A08%3A03Z&se=2026-11-03T20%3A08%3A03Z&sr=c&sp=r&sig=09S8hSsqMpgQmQufTjbizV%2F4rsstob9xyKS7RIbm874%3D) ## Inherited Permissions If a user is in one or more groups, they’ll automatically receive all the permissions assigned to those groups. These inherited roles appear on the user’s profile under **Roles & Permissions** with an **Inherited** label, as shown in the screenshot below. ![](https://cdn.us.document360.io/7951ec8a-9aa7-4a24-82dd-bc5d6b13dc78/Images/Documentation/user-roles-and-permissions.png?sv=2026-02-06&spr=https&st=2026-11-03T19%3A08%3A03Z&se=2026-11-03T20%3A08%3A03Z&sr=c&sp=r&sig=09S8hSsqMpgQmQufTjbizV%2F4rsstob9xyKS7RIbm874%3D) ## Managing Permissions Admins can view, toggle, and update roles from both: - The **Directory** tab - The **Groups** tab Role assignments are grouped by function (Environmental, Health, & Safety; Findings & Actions; Inspections; Organization Settings; and Risk Assessments) and include a description for each permission level.