Skip to content

Access rights by row and level

This page lists, row by row, what each level in the rights table under Super > Users allows. The levels are Read, Edit, Create, Approve, Manage, Archive and Admin. Unless a row below says otherwise, each level includes everything the levels before it allow. How the table works, how a user’s own rights and group rights combine, and which features need one exact level are described in The Users page and the rights table. The controls themselves are described on each module’s own pages, linked under each row.

Row Level When
Main area row Read Set when the user account is created, with Add user or with Create multiple users.
Company menus row Read Set when the user account is created, with Add user or with Create multiple users.

These are the user’s own rights. Rights from an access group, such as the predefined Action Manager group, come in addition only while the user is a member of that group; see The Access groups tab.

There is one row per document module, for example the modules Avvik (nonconformities) or Styrende dokumenter (governing documents) in a company that uses those names. A right on one module’s row applies only to that module.

Level on the module’s row What it allows in that module
None Nothing, except that a person invited to the comments of a document can open that document while they are a participant of its current step.
Read Open and read the module’s documents, and print them or make a PDF. Be listed when a colleague sends a Read & understood request, and confirm one. Follow a document, which also needs the Read right on the main area row.
Edit Work on a document step you own: fill in the fields and use the text editor. Start a new revision of a published document when the module allows revisions. Send and follow up Read & understood requests. See the small pencil next to the fields of a published document in a module without revisions.
Create Create new documents in the module.
Approve Publish a document by approving its last step. Be offered as a receiver on approval steps. Save a change made with the small pencil on a published document.
Manage Everything Approve allows. Users with exactly the Manage right on the module’s row can also add a new value in a search-as-you-type dropdown; Archive and Admin on the row do not give this.
Archive Archive a document, and unarchive it, when you own its current step or the document is published. Open archived documents, which are hidden from lists for users without the Archive right.
Admin Everything Archive allows. Admin on a module’s row does not allow deleting a published document: no right in your company’s user management does. If a published document must be deleted, contact Antenor; see Get help from Antenor support.

See Workflow steps, statuses, receivers and notifications, Edit a published document and see earlier revisions, Delete or archive a document and Ask colleagues to confirm they have read a document.

Level on the reports row What it allows
Read See Reports in the left menu, and export reports. A report is listed in Reports and opens only when you also have the Read right on every module the report covers. Set your own filters and sort order in a report, which do not change the report for others.
Edit No report action in the interface needs this level in particular. The Settings tab of a report is shown only when the report covers a single module, and then only to the report’s creator and to users with the Admin level on the Super area row.
Create Create a report. See the Accept Contents Overview tab of a report.

Deleting a report needs the Create level or higher on the Super area row, not on the reports row. See Create a report and Reports: who can do what, and the Reports list.

Row and level What it allows
KPI row, Create Create new KPI scorecards.
KPI row, Manage or higher Add headers (Add new header) and rows to a scorecard, in the current year, together with the Edit right on that scorecard’s row.
“Kpi: <scorecard name>” row, Read Open the scorecard, see its graphs, export it, and see it in the list and the menu.
“Kpi: <scorecard name>” row, Edit Change values, the name, targets and information.
“Kpi: <scorecard name>” row, Create Delete the scorecard.

Whoever creates a scorecard gets the Create right on its row automatically, and the rights are copied to each new year copy. The Admin level on the Super area row does not give any KPI right by itself. See Rights, years, favourites and Excel export in KPI Scorecard.

Level on the Action Manager row What it allows
Read Open the Action Manager, and add actions to a document with the flag (Create new action). See the Actions sections that list linked actions in other modules, for example on a person in Competency, an equipment item or a data sheet.
Create New action and New plan in the Action Manager, and the icons on the action rows there, such as Copy action.

In a standard setup, users are members of the predefined Action Manager access group, which gives the Admin level on the Action Manager row. Your user administrator can remove a user from the group; a user who is not a member and has no own right on the row cannot open the Action Manager. Check a user’s groups on the Users tab.

What a user can do with one action depends on their place in it, for example as its creator or its responsible. The Action Manager’s Admin tab, including checklist templates, needs the Admin level on the Super area row. See The Action Manager index: tabs, columns, filters and buttons and The Action Manager Admin tab.

Level on the Risk management row What it allows
Read See the risk index, open analyses and their risk elements, use Graphical analysis and open graphs.
Edit Use Edit mode on the index and in an analysis, change analysis information and risk elements, move rows, update an analysis to a new matrix version, and save changes to an existing graph.
Create Create an analysis; add, copy within the analysis and delete risk elements; delete an analysis; create and delete graphs.
Admin The Admin and Risk Heat Map tabs. Untick the old closed marking on an analysis.

The trash icon on an analysis is shown to users with the Admin level on the Super area row, to the analysis’s facilitator and to its creator; deleting still needs the Create right on the Risk management row. Deleting a risk matrix, and changing the values of a global field on the Admin tab, need the Admin level on the Super area row. See The risk index page and The risk Admin tab.

Level on the Competency row What it allows
Read Open Competency, see your own record and export the people list.
Read, with the View Report right The Report tab for all active people, read-only. On the Competency Admin tab, the View Report right can be given only to users who have exactly the Read right on the Competency row at that moment.
Edit Change your own record. Create a new competency type by typing a new name in a person’s competency table. New action on a person.
Create As Edit.
Approve See and change your own record and the people you are responsible for. Add people. The Report and Analysis tabs; both stay greyed out until a responsibility is given to you. A View Report right you were given while you had exactly Read stays, and it opens the Report tab (not Analysis) without a responsibility.
Manage, Archive or Admin See and change everyone. The Competency Admin tab.

See The competency user list, Give managers access to people in Competency and The Competency Admin tab.

Level on the Equipment row What it allows
Read Open the equipment list and items; search, filter, choose columns, add favourites, share the list and export it.
Edit Change the fields of an item, work on its maintenance records (complete, unlock, delete a whole record), manage the item’s attachments, and create an action from the item. Be selectable as Responsible.
Create Add, copy and delete equipment items. Delete a single file from a maintenance record’s documentation.
Admin The equipment Admin tab.

Approve, Manage and Archive add nothing in Equipment beyond Create. See The equipment list, The equipment page and The equipment Admin tab.

Level on the Substance register row What it allows
Read Open the register and the data sheets, download and print a sheet, share a filtered list, and see a sheet’s usage rows.
Edit Be selectable as Responsible on a usage row. Nothing else beyond Read.
Create Every change: add a data sheet, change it, its files and its status, take a newer version, export the register, edit the usage rows, and create an action on an active sheet.
Admin The Global index and Admin tabs.

Approve, Manage and Archive add nothing beyond Create. The Admin level on the Super area row does not give any Substance register right by itself. See The substance register index and The data sheet page.

Level on the Job Safety Analysis row What it allows
Read Open the module, list analyses, open an analysis and see its items.
Edit Change an analysis’s information, change items and move rows.
Create Create and delete analyses, and add and delete items.
Approve Be selectable as Responsible on an item.

See The JSA index and the analysis dialog.

Level on the Environmental aspects row What it allows
Read Open the module, list analyses, open an aspect analysis, its items and graph, and view an action.
Edit Change an analysis’s information, change items and their status, and move rows. Respond to, accept, reject or close an action that you sent or that you are responsible for.
Create Create and delete analyses, add and delete items, and send an action.
Approve Be selectable as Aspect manager or as an action’s Responsible.

See The environmental aspect index and the analysis dialog.

Diagrams has no row in the rights table. Membership of the predefined Diagrams access group gives access, and every member can create, copy, change and delete diagrams. Links from ABMS and Generate in the drawing editor also need the Admin level on the Super area row; Generate also needs your company’s AI assistant. See Get access to Diagrams.

Level on the company menus row What it allows
Read Given to every new user.
Edit Change a company menu.
Create Duplicate or delete a company menu.

Reaching Super > Company menus also needs the Admin level on the Super area row. See Build or edit a company menu.

Exactly the Admin level on the Super area row shows the Super menu with all its pages, for example users, access groups and rights, ownership transfer, company menus, system settings, field settings, global fields, templates and modules. Manage or Archive on the row does not show it. The Super area row can be given only as a user’s own right, not through an access group, and you cannot change your own right on it.

Outside the Super menu, the Admin level on the Super area row also allows:

Where What
Action Manager The Admin tab: tagging fields, due-date approval and checklist templates.
Global fields in modules Changing the values of a global field, also where the field is shown on a module’s Admin tab.
Published documents Saving a change made with the small pencil, as an alternative to the Approve right on the module’s row.
Reports Seeing and using the Settings tab of every report that covers a single module; for other users that tab is shown only to the report’s creator. Creating and saving analyses, as an alternative to the Create right on the reports row.
Risk management Deleting a risk matrix. Seeing the trash icon on every analysis.
Diagrams Links from ABMS and Generate in the drawing editor.

Deleting a report needs the Create level or higher on the Super area row. The Super area row gives no rights in the modules: a superuser needs a right on each module’s row like any other user.

Level on the main area row What it allows
Read Follow a document you can open. Given to every new user. You cannot change your own right on this row.

See Follow a document.