Access Control

Access Control is the heart of your system's security and workflow management. It provides granular control over which user groups can perform specific actions—like creating, viewing, editing, and deleting records—on any given form. It also dictates how records move through your established workflows and which parts of a form are visible at each step.

This guide will walk you through the core concepts and configuration options.

Default Access Settings by Module

To provide a clear starting point, the tables below outline the default access permissions for the primary form in each module. Think of these as the standard templates; you can customise these settings to fit your organisation's specific needs using the controls described further down this page.

User Role Legend:

• A - Admin
• PU - Power User
• U - User
• IM - Injury Manager
• CO - Contractors
• DA - Drug and Alcohol Monitors
• HMM - Health Management Monitors

Module Access Control

Module	Create	View	Edit	Delete
Incident Reporting	A, PU, U	A, PU, U	A, PU, U	A
Actions	A, PU, U	A, PU, U	A, PU, U	A
Hazards	A, PU, U	A, PU, U	A, PU, U	A
Injury Management	A, PU, U	A,, IM	A, IM	A, IM
Risk Assessment	A, PU, U	A, PU, U	A, PU	A
Documents	A, PU, U	A, PU, U	A, PU, U	A
Inspections	A, PU, U	A, PU, U	A, PU, U	A
Job Safety Observations	A, PU, U	A, PU, U	A, PU, U	A
Corporate Risk Register	A, PU	A, PU	A, PU	A
Training Records	A, PU	A, PU	A, PU	A
Contractor Management	A, PU	A, PU, U, CO	A, PU, CO	A
Field Observations	A, PU, U	A, PU, U	A, PU, U	A
SWMS	A, PU, U	A, PU, U	A, PU, U	A
Permit to Work	A, PU, U	A, PU, U	A, PU, U	A
Non-Conformance	A, PU, U	A, PU, U	A, PU	A
Quality	A, PU, U	A, PU, U	A, PU	A
Alerts	A, PU	A, PU, U	A, PU	A
Health Management	A, HMM	A, HMM	A, HMM	A
Meetings	A, PU, U	A, PU, U	A, PU, U	A
Work Hours	A	A	A	A
Change Management	A, PU, U	A, PU, U	A, PU, U	A
Diary	A, PU, U	A, PU, U	A, PU, U	A

Registers Access Control

Module	Create	View	Edit	Delete
Equipment Maintenance	A, PU	A, PU, U	A, PU	A
Waste Disposal	A, PU, U	A, PU, U	A, PU, U	A
Asbestos Register	A, PU, U	A, PU, U	A, PU, U	A
Chemical Register	A, PU, U	A, PU, U	A, PU, U	A
Classified Equipment Register	A, PU, U	A, PU, U	A, PU, U	A
Drills and Exercise Register	A, PU, U	A, PU, U	A, PU, U	A
Drug and Alcohol Register	A, DA	A, DA	A, DA	A, DA
Electrical Equipment Register	A, PU, U	A, PU, U	A, PU, U	A
Fire Extinguisher Register	A, PU, U	A, PU, U	A, PU, U	A
First Aid Register	A, PU, U	A, PU, U	A, PU, U	A
Ladder Register	A, PU, U	A, PU, U	A, PU, U	A
Lifting Equipment Register	A, PU, U	A, PU, U	A, PU, U	A
PPE Register	A, PU, U	A, PU, U	A, PU	A
Plant Equipment Register	A, PU, U	A, PU, U	A, PU	A
Vehicle Register	A, PU, U	A, PU, U	A, PU, U	A

---

Configuring Access: The Four Control Tabs

Access Control for a form is managed across four distinct tabs. Understanding how they work together is key to setting up your permissions correctly.

1. General Access Settings

This tab sets the high-level, form-wide permissions and visibility.

• Core Permissions: Assign groups that can:
  • Edit records created from this form.
  • Delete records created from this form.
  • Import records using this form.
  • Create records based on recurrence rules.
  • View Drafts: Select groups that can see all 'Draft' records. Users outside these groups can only see their own drafts.
• Hierarchy Access: You can check Ignore hierarchy access to grant all users access to records from this form, regardless of their position in the organizational hierarchy.
• Form Display Options: Control where the form itself appears in the system.
  • Display: The form is visible in relevant dropdown menus (e.g., "Add New").
  • Do not display: The form is hidden from dropdowns, preventing new record creation.
  • Restrict by group and hierarchy: Make the form visible only to specific user groups or hierarchy levels.

2. Advancing Form Workflow Permissions

This tab controls who can move a record from one workflow step to the next (e.g., from 'Draft' to 'Submitted').

1. Select a Workflow step (e.g., Draft).
2. From the list of available groups, select the group(s) that should be able to advance the form from this step.
3. Use the arrow button to move them into the "permitted" list.
4. Repeat for all other workflow steps and select OK.

3. Record Readable Permissions in Workflow

This tab defines which groups can view (read) a record when it is at a specific workflow step.

1. Select a Workflow step (e.g., Submitted).
2. Select the group(s) that should be able to read records that are currently at this step.
3. Use the arrow button to move them into the "permitted" list.
4. Repeat for all other workflow steps and select OK.

4. Section Access Permissions

This tab provides the most granular level of control, allowing you to set read and edit rights for specific sections within a form, based on the record's current workflow step.

1. Select a Workflow step.
2. Select one or more Form Sections.
3. Assign Group(s) able to read the selected section(s) at this workflow step.
4. Assign Group(s) able to edit the selected section(s) at this workflow step.
5. Repeat for all necessary workflow steps and sections.
6. Select OK.

---

Important Note: Putting It All Together

Permissions are layered. A user's ability to see or edit a field is determined by a combination of all four tabs. For example:

• A user might have general Edit rights from the General tab.
• However, if the record is in a "Closed" workflow step, the Record Readable settings might restrict their access to Read-only.
• Furthermore, even if they can edit the record, a specific "Manager Approval" section on the form might be locked via the Section Access tab.

Always consider the entire chain of permissions, from general access down to the specific section and workflow step, to ensure your configuration behaves as expected.