Rights, roles and e-mails in Risk management
What you can do in Risk management depends on your right on the Risk management row, and for a few controls on who you are: user administrator, facilitator or creator of an analysis, owner of a graph, or creator of an action. This page lists both, explains that risk analyses have no risk owner or action responsible setting, and lists the e-mails the module sends. Your user administrator grants the rights; see Give a user access rights and The Users page and the rights table.
What each right adds in Risk management
Section titled “What each right adds in Risk management”The levels build on each other: each level includes everything the lower levels allow. The table lists them from the lowest, Read, to the highest, Admin.
| Right on the Risk management row | What it adds |
|---|---|
| Read | Open Risk management, the index with all analyses, and every analysis. Read the information, the risk-element table, the risk picker, attachments and the action panel. Search, sort, filter and share the index. Start the three Excel exports. Tick and untick Top 10; the flag is saved on the risk element, so everyone who opens the analysis sees the change. See Graphical analysis and open graphs. See The risk-element table and The risk index page. |
| Edit | Change analysis information, on Information or in Edit mode on the index. Use Edit mode in the risk-element table: texts, status, risk values, attachments and links, and new actions from the Actions cell. Move rows. Answer yes to “New matrix version”. Save changes to an existing graph. |
| Create | Create analyses with New risk analysis. Add risk elements, copy them within the analysis and delete them. Delete an analysis, when the trash icon is shown to you (see the next table). Save a new graph and delete graphs. |
| Approve | You can be chosen as Facilitator of an analysis. The facilitator list holds the active users of your company with the Approve right or a higher level on the Risk management row. |
| Manage, Archive | Nothing specific in Risk management. These levels matter here only because they include all lower levels. |
| Admin | The Admin tab (dropdown lists and matrices) and the Risk Heat Map tab. Untick the Closed marking that some older analyses carry. See The risk Admin tab and The risk heat map. |
Some controls are shown to users whose right is too low for the action; the action is then not carried out. This applies in two places: in Edit mode of the risk-element table, the controls for adding, inserting, copying and deleting risk elements are shown with the Edit right, but these actions need the Create right; and the red trash icon on the index is shown to the facilitator and the creator of an analysis and to your user administrators, but deleting needs the Create right.
Controls that depend on who you are
Section titled “Controls that depend on who you are”| Who | What it gives in Risk management | Still needs |
|---|---|---|
| Users with the Admin level on the Super area row (your user administrators) | The red trash icon on every analysis on the index. The trash icon for deleting a matrix on the Admin tab. Renaming and removing global fields, and changing their values, on the Admin tab. The copy and delete icons on every linked action in a risk element’s action panel. | The Create right to delete an analysis; the Admin right on the Risk management row to see the Admin tab; the Edit right to use edit mode, where the action icons are shown. |
| The facilitator of an analysis | The red trash icon on that analysis on the index. | The Create right to delete it. |
| The user who created an analysis | The red trash icon on that analysis on the index. | The Create right to delete it. |
| The owner of a graph (shown as Creator in Graph index) | Locked and Hidden on that graph, and the delete x on it while it is locked. | The Create right to delete it; the Edit right to save changes. |
| The creator of a linked action | The copy icon, and for actions with status New or In progress the delete icon, on that action in the action panel, in edit mode. | The Edit right on the Risk management row, to use edit mode. |
Details: Copy or delete a risk analysis, Set up risk matrices, Manage the risk dropdown lists, The graphical analysis page, Follow up a risk element with actions.
Risk owner and action responsible
Section titled “Risk owner and action responsible”In this version of Risk management, a risk analysis has no risk owner or action responsible setting. Neither the analysis information form nor the index offers such fields, and they do not limit who can receive an action created from a risk element: those actions follow the normal rules of Action Manager. Some older analyses show a ticked Closed checkbox on Information. It is a marking from an earlier version of the module and does not make the rest of the form read-only; see The analysis information form.
E-mails from Risk management
Section titled “E-mails from Risk management”| Event | |
|---|---|
| You start Risk Management incl. details | One e-mail to the address registered on your user, with the Excel file attached. See Excel exports in Risk management, column by column. |
| An action linked to a risk element is created, sent or changed | The usual Action Manager e-mails. See Action statuses, who holds an action, and e-mails. |
| Creating, changing, copying or deleting analyses and risk elements in Risk management, status changes, matrix changes, dropdown lists, graphs and the heat map | No e-mail from Risk management. |
Deleting a risk element, or a whole analysis, also deletes the actions linked to its risk elements, and this sends no e-mail. Tell the people who hold those actions.