Roles and permissions explained

Modified on Tue, 4 Aug at 3:42 PM

What each role can do in Tendable, and how a person's role and their unit work together to set what they can see and change.

Who this is for: Administrators and User Managers deciding what access to give someone, and anyone who wants to understand the roles.

The short version

Every person in Tendable has one role. The role decides what they can do. Where they're assigned in your organisation structure decides where they can do it. The two work together.

There are four roles, and they build on each other. Each role can do everything the role below it can, plus one more thing.

The four roles

Role	What they can do
Viewer	See results and reports. Can't carry out audits or change anything. Good for someone who needs oversight without doing the work, such as a senior leader who just wants to see scores.
Assessor	Everything a Viewer can do, plus carry out and complete audits. This is the frontline role, and the default for new users.
User Manager	Everything an Assessor can do, plus invite people and manage users (change roles, deactivate, reactivate).
Administrator	Everything a User Manager can do, plus set up and change your organisation structure. Full access.

Most of your people will be Assessors (the staff doing audits). You'll have a smaller number of User Managers or Administrators who run things, and perhaps a few Viewers for oversight.

How role and unit work together

A person is assigned to one unit in your organisation structure, and their reach flows down the tree. They can work in their own unit and everything beneath it, but not in units above or alongside it.

So role and unit combine like this:

Role is what you can do (view, audit, manage users, manage structure).
Unit is where you can do it (your unit and everything under it).

For example, a User Manager assigned to "St Mary's Hospital" can invite and manage people across St Mary's and all its wards, but not in a different hospital. An Assessor assigned to a single ward carries out audits in that ward only.

Who can give which role

You can only give someone a role at or below your own.

An Administrator can give any role, including making another Administrator.
A User Manager can create Viewers, Assessors, and other User Managers, but not Administrators.

For the same reason, you can't change the role of, or deactivate, someone whose role is higher than yours. A User Manager can't deactivate an Administrator, for example.

Where roles are set

There's no separate screen for assigning roles. You set someone's role when you invite them, and you can change it later by editing that user. Both are covered in the articles below.

Invite people to Tendable
Deactivate or reactivate a user
How your organisation structure works (units and the hierarchy)