Overview

SafeBase Admins can control their Organization Members' access to a Trust Center via RBAC (Role-Based Access Control). This article covers the legacy roles available and their permissions, provides an in-depth description, and explains how to manage RBAC in the Trust Center. For information on how our SCIM/Directory Sync add-on works with Trust Center Roles, please view this help article.

Terms to Know

AM - Account Manager

KB - Knowledge Base

QNR(s) - Questionnaire(s)

QM - Questionnaire Manager

TC - Trust Center

TCE - Trust Center Editor (View)

TCUs - Trust Center Updates

Role Matrix - Legacy Roles

Access	Admin	QM	AM	Viewer	TC Editor	TC Viewer	KB Editor	TL Viewer
Dashboard	X	X	X	√
Accounts	X	X	X	√
TCE	X	X	√	√	X	√
KB	X				X		X
Documents	X	√	√	√	X	√
TCUs	X	√	√	√
Subscribers	X			√
QNR(s)	X	X	√	√
Conversations	X	X	X	√
TCE Settings	X
Change Log	X
Trust Library Search	X	√	√	√	√	√	√	√
Settings	X

Edit Access: 'X'

View Access: '√ '

Legacy Roles & Descriptions

This list descends from least to most privileged.

Trust Library Viewer

View:
- Trust Library Search

TL Viewer

Knowledge Base Editor

View & Edit:
- KB
  - The KB Editor role can bulk import, individually add/edit, manage, and export KB entries.
- TL Search

KB Editor

Trust Center Viewer

Includes permissions of the TL Viewer

View:
- TCE and KB
  - The TC Viewer role can view the Trust Library TCE
  - Grants ability to use TCE's Preview Mode
  - Can view Documents but not upload now ones, or new versions of existing documents

Trust Center Editor

Includes permissions of the KB Editor & TC Viewer

View & Edit - TCE and KB
- The TC Editor role can edit all content in the Trust Library TCE
- Can view, edit existing, and upload new Documents

Trust Center Editor

Viewer

Includes permissions of the TL Viewer / TC Viewer; cannot view Settings

View
- Dashboard
- Accounts
- TC Editor
- Documents
- TCUS and Subscribers
- Trust Library Search
- Questionnaires
- Conversations

Viewer

Account Manager

Includes permissions of the TL Viewer / TC Viewer; cannot view Settings

Recommended for Sales, Account Execs, and GTM members

View:
- Dashboard
- Accounts
- TC Editor
- Documents
- TCUs and Subscribers
- Trust Library Search
- Questionnaires
- Conversations
The Account Manager role can manage access requests and accounts.

Account Manager

Questionnaire Manager

Recommended for team members who require access to run, complete, and review questionnaires, as well as managing related account activities.

Includes permissions of the TL Viewer / TC Viewer / Account Manager; cannot view Settings

View:
- Dashboard
- Accounts
- TC Editor
- TCUs and Subscribers
- Trust Library Search
- Questionnaires
- Conversations
The Questionnaire Manager includes all permissions of the Account Manager with the added ability to edit/approve answers in SafeBase's AIQA feature.

Questionnaire Manager

Admin

Admins are the Trust Center's super users. Their permissions include all roles; can view the Change Log, and can view/edit all SafeBase and TCE Settings.

Note: there is no legacy version of this role; any organization members with this role retain view and edit privileges across all SafeBase features.

View & Edit:
- Dashboard
- Accounts
- TC Editor
- TCE Settings
- Change Log
- KB
- Documents
- Trust Center Updates and Subscribers
- Trust Library Search
- Questionnaires
- Conversations
- SafeBase Settings

Admin

Change Log Trust Center Editor (TCE) Settings

Admins can utilize the Change Log to view and search actions from organization members in the Trust Center Editor.

Additionally, Admins have access to edit the TCE Trust Center Settings. This section of SafeBase allows Admins to manage/configure:

Appearance & Branding
Access Request, Contact Info, and Preview Mode functionality
Public Analytics Integrations & SEO Settings

SafeBase Settings

Admins have full access to their SafeBase Settings; this section allows Admins to manage & configure the settings for:

Organization Members
Organization Member & User Account Security
Integrations
API Keys
Documents
Accounts
NDAs
Permission Profiles

Admin view

Default Role & Allow Document Downloads

Admins can set the role for new organization members added to the Trust Center by assigning a Default Role.
We recommend setting the default role based on the concept of least privilege and then elevating permissions from there.

Allow Download Documents can be turned on for all roles except the Trust Library Viewer and KB Editor Roles. This will allow members to download content from the TCE.