Overview
SafeBase Admins can control their Organization Members' access to a Trust Center via RBAC (Role-Based Access Control). These internal users and their roles are managed within the Settings -> User Management.
This article covers the current roles available and their permissions, provides an in-depth description, and explains how to manage RBAC in the Trust Center.
Depending on when your Trust Center was created, you may also see Legacy roles in your Trust Center. For more information on Legacy roles, please view this help article.
Built-In Roles
The Trust Center has the following built-in roles available for you to assign to your Organization Members:
Role | Description |
|
Admin | Full access to everything in SafeBase. |
|
Read-only Admin | View access to everything in SafeBase including settings. No edit access. |
|
Account Manager | Full access to accounts and access requests. Can view the Trust Center and Knowledge Base. |
|
Trust Contributor | Full access to everything in the Trust Center, Knowledge Base, and Documents. |
|
Trust Consumer | View only access to Trust Center and Knowledge Base. |
|
Questionnaire Contributor | Can answer and approve questions on questionnaires but cannot run AIQA. Can view the Trust Center and Knowledge Base. |
|
Questionnaire Manager | Full access to questionnaires. Can view the Trust Center and Knowledge Base. |
|
Granular Role Permissions
To view the list of permissions assigned to each role, from the User Management table, click on "Roles" tab:
Then, click on a role from the list to view the list of permissions assigned to that role. Under the "Permission" column, any permission with a checkmark indicates that permission has been assigned to the role, and any permission with an x mark indicates that permission has not been assigned to the role.
Default Roles for New Members
Admins can set the role for new organization members added to the Trust Center by assigning a Default Role.
For information on how our SCIM/Directory Sync add-on works with Trust Center Roles, please view this help article.
We recommend setting the default role based on the concept of least privilege, and then elevating permissions from there. From the list of built-in roles, this would be the Trust Consumer role.
To set a default role for all users, from the User Management section in your Settings page, click on the dropdown for "Default Role for New Members" and select the desired default role.
Customizing Role Permissions
Built-in roles cannot be edited, except for the option to download documents.
Note: If you are on an Enterprise plan, you can create additional roles with custom permissions; please contact your CSM if you would like to create any custom roles.
Downloading Documents Permission
To edit the option to download documents for a built-in role, from the User Management table, click on "Roles" tab.
Then, select the role for which you want to edit the document download setting. Scroll to the Files section in the list of permissions for that role.
Scroll down to and click the checkbox next to the "Download files" row to enable or disable the option for this role:
