What can each role do on the Access Control page?

Ingrid

The Access Control page lets you manage Access Control Groups, the companies in each group, and the users assigned to each group. What you can do depends on your role.

Admins have full control across all groups.
Group Admins and Portfolio Managers work within their own group.
Operations, Internal Business User, User, and View Only roles can use the platform’s data but cannot change groups or users.

This article lists the Access Control permissions for each action and for each role.

Before you begin

Your permissions come from your assigned role.
In this article, own group means the Access Control Group your user belongs to.

Permissions at a glance

Action	Admin	Group Admin	Portfolio Manager	Internal Business User	Operations	User	View Only
View companies and findings	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Create and share folders	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Download or export documents	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Submit support tickets	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Add companies to a portfolio	Any group	Own group	Own group	No	No	No	No
Remove companies from a portfolio	Any group	Own group	No	No	No	No	No
Create or modify users	Any user	Own group	No	Not applicable	No	No	Not applicable
Remove users	Any user	Own group	No	Not applicable	No	No	Not applicable
Create or modify Access Control Groups	Yes	No	No	No	No	No	No
Modify group limits	Yes	No	No	No	No	No	No
Modify distribution list settings	Yes	No	No	No	No	No	No
Delegate portfolio management	Yes	No	No	No	No	No	No

Key: Yes = permitted | No = not permitted | Not applicable = does not apply to the role | Any group = any Access Control Group | Own group = only within the role’s own group

What can each role do by task?

How do I manage companies in a group?

Admins can add and remove companies in any Access Control Group.

Group Admins can add and remove companies within their own group.

Portfolio Managers can add companies within their own group but cannot remove them.

Operations, Internal Business User, User, and View Only roles cannot add or remove companies in any group.

How do I manage users in a group?

Admins can create, edit, and delete any user, resend activation emails, and assign users to a group.

Group Admins can create, edit, and remove users within their own group. They cannot assign users to a group.

Portfolio Managers, Operations, and User roles cannot create, edit, or delete users, resend activation emails, or assign users to a group.

Internal Business User and View Only roles don’t manage users on this page, so user management doesn’t apply to them.

How do I manage Access Control Groups and group settings?

Only Admins can create, edit, or delete Access Control Groups. Admins can also:

Allocate subscriptions to a group and set the flexibility given to Group Admins and Portfolio Managers.
Set group limits.
Set access to rating bundles for a group.
Set company details (tiers, life cycles, and relationships) as global or group-level access.
Set the default group that new users join.
Modify distribution list settings.
Delegate portfolio management.

No other role can change these settings.

Publish Date or Recent Edits

November 22, 2024: Separated from User Permissions and added VRM/TMH roles.