Pre-Configured Groups and Permissions
Compyl provides a set of pre-configured user groups to help manage access and permissions across your organization. Below is a breakdown of each default group and the types of actions users within that group can perform.
| Group | Permissions Included |
|---|---|
| Administrator | Full access to all modules, including configuration, user management, and platform settings. Can create, read, update, and delete data across the system. Ideal for IT Admins or platform owners. |
| Asset Manager | Manages IT-related assets, including adding, updating, and linking assets to vendors, risks, or policies. Ideal for IT teams maintaining an asset inventory. |
| Auditor Access | Read-only access for audit, assessment, and documentation areas. Designed for internal compliance teams or third-party auditors to review without making changes. |
| Contracts Manager | Access to contract-related modules including dashboards and reports. Can create, modify, and manage contracts throughout their lifecycle. |
| Contributor | General access to contribute to records like assessments or reviews. Can comment, provide input, and participate in workflows — but cannot make structural changes. |
| Contributor (Assigned) | Same as Contributor, but limited strictly to records where they are explicitly assigned. Cannot view or interact with unrelated records. |
| Dashboards and Reports | Read-only access to visual analytics and reports. Designed for stakeholders who need visibility into metrics and progress without editing capabilities. |
| External Assessment Contributor | Limited access for third-party or vendor users to respond to assigned assessments only. Cannot access internal platform features. |
| Policies Administration | Full access to manage the policy lifecycle — drafting, submitting for approval, publishing, and archiving. Best suited for compliance leads or document owners. |
| Read-Only | Can view most data across modules but cannot make any changes. Designed for executives or advisors who require insight but not interaction. |
| Risk Manager | Broader access to risk management functions than a Risk Owner. Can oversee, review, and manage risks across business units or projects. |
| Risk Owner | Focused access to create, update, and maintain specific risk entries. Can link risks to controls, vendors, or assets. Ideal for those directly responsible for risk remediation. |
| Security Manager | Access to security-specific controls, events, and incidents. Can manage and track technical or operational security issues. |
| Super Admin | All Administrator privileges plus elevated capabilities like managing SSO configuration, MFA settings, and global system controls. Reserved for platform superusers. |
| Vendor Manager | Manages vendors and their associated records, assessments, and documentation. Can create, update, and assess third-party vendor risk. |
Updated 2 days ago
Learn more...
Did this page help you?