Role — Experts & Events

7 of 8

View users user:viewView users within the granted scope.AllOwn dept.Depts.

Create users user:createCreate users within the granted scope.AllOwn dept.Depts.

Update users user:updateUpdate users within the granted scope.AllOwn dept.Depts.

Delete users user:deleteDelete users within the granted scope.AllOwn dept.Depts.

Activate and deactivate users user:activateActivate, deactivate and unlock an account.AllOwn dept.Depts.

Assign roles user:assign-roleAssign roles, change the department and the account type.SensitiveAllOwn dept.Depts.

Direct grants user:grant-permissionAdd or withdraw an individual grant, with a scope and an end date.SensitiveAllOwn dept.Depts.

Reset two-step verification user:reset-mfaRemove another user’s verification methods and make them enrol again.SensitiveAll

6 of 6

View roles role:viewView roles within the granted scope.All

Create roles role:createCreate roles within the granted scope. Sensitive: its holder needs two-step verification and a direct grant needs a reason.SensitiveAll

Update roles role:updateUpdate roles within the granted scope. Sensitive: its holder needs two-step verification and a direct grant needs a reason.SensitiveAll

Delete roles role:deleteDelete roles within the granted scope. Sensitive: its holder needs two-step verification and a direct grant needs a reason.SensitiveAll

View the permission catalogue permission:viewThe catalogue and who holds each permission.All

Access reviews access-review:manageA review of staff roles and grants every 90 days.All

4 of 4

View departments department:viewView departments within the granted scope.AllOwn dept.Depts.

Create departments department:createCreate departments within the granted scope.All

Update departments department:updateUpdate departments within the granted scope.All

Delete departments department:deleteDelete departments within the granted scope.All

4 of 4

View projects project:viewView projects within the granted scope.AllOwn dept.Depts.

Create projects project:createCreate projects within the granted scope.AllOwn dept.Depts.

Update projects project:updateUpdate projects within the granted scope.AllOwn dept.Depts.

Delete projects project:deleteDelete projects within the granted scope.AllOwn dept.Depts.

9 of 10

View experts expert:viewView experts within the granted scope.AllOwn dept.Depts.

Create experts expert:createCreate experts within the granted scope.AllOwn dept.Depts.

Update experts expert:updateUpdate experts within the granted scope.AllOwn dept.Depts.

Delete experts expert:deleteDelete experts within the granted scope.AllOwn dept.Depts.

Import experts expert:importImport experts within the granted scope.AllOwn dept.Depts.

Export experts expert:exportExport experts within the granted scope.AllOwn dept.Depts.

See an expert’s sensitive fields expert:view-sensitiveID, birth date, IBAN, account and national address unmasked.SensitiveAllOwn dept.Depts.

Merge records of experts expert:mergeMerge records of experts within the granted scope. Sensitive: its holder needs two-step verification and a direct grant needs a reason.SensitiveAllOwn dept.Depts.

Import researchers (survey system) researcher:importImport researchers (survey system) within the granted scope. Sensitive: its holder needs two-step verification and a direct grant needs a reason.SensitiveAllOwn dept.Depts.

Export researchers (survey system) researcher:exportExport researchers (survey system) within the granted scope. Sensitive: its holder needs two-step verification and a direct grant needs a reason.SensitiveAllOwn dept.Depts.

7 of 8

View authorities authority:viewView authorities within the granted scope.AllOwn dept.Depts.

Create authorities authority:createCreate authorities within the granted scope.AllOwn dept.Depts.

Update authorities authority:updateUpdate authorities within the granted scope.AllOwn dept.Depts.

Delete authorities authority:deleteDelete authorities within the granted scope.AllOwn dept.Depts.

Import authorities authority:importImport authorities within the granted scope.AllOwn dept.Depts.

Export authorities authority:exportExport authorities within the granted scope.AllOwn dept.Depts.

See an authority’s sensitive fields authority:view-sensitiveCommercial register and bank details unmasked.SensitiveAllOwn dept.Depts.

Merge records of authorities authority:mergeMerge records of authorities within the granted scope. Sensitive: its holder needs two-step verification and a direct grant needs a reason.SensitiveAllOwn dept.Depts.

5 of 5

View affiliation invitations enter-data-invitation:viewView affiliation invitations within the granted scope.AllOwn dept.Depts.

Invite affiliation invitations enter-data-invitation:inviteInvite affiliation invitations within the granted scope.AllOwn dept.Depts.

Update affiliation invitations enter-data-invitation:updateUpdate affiliation invitations within the granted scope.AllOwn dept.Depts.

Review affiliation invitations enter-data-invitation:reviewReview affiliation invitations within the granted scope.AllOwn dept.Depts.

Send update campaigns update-campaign:sendSend update campaigns within the granted scope.AllOwn dept.Depts.

3 of 3

View public registration public-registration:viewView public registration within the granted scope.AllOwn dept.Depts.

Manage public registration public-registration:manageManage public registration within the granted scope.AllOwn dept.Depts.

Review public registration public-registration:reviewReview public registration within the granted scope.AllOwn dept.Depts.

2 of 2

View edit requests edit-orders:viewView edit requests within the granted scope.AllOwn dept.Depts.

Decide edit requests edit-orders:decideDecide edit requests within the granted scope.AllOwn dept.Depts.

4 of 4

View expert ratings expert-rating:viewView expert ratings within the granted scope.AllOwn dept.Depts.

Create expert ratings expert-rating:createCreate expert ratings within the granted scope.AllOwn dept.Depts.

View authority ratings authority-rating:viewView authority ratings within the granted scope.AllOwn dept.Depts.

Create authority ratings authority-rating:createCreate authority ratings within the granted scope.AllOwn dept.Depts.

5 of 5

View my access requests my-data-access-order:viewView my access requests within the granted scope.Own

Send my access requests my-data-access-order:sendSend my access requests within the granted scope.Own

Update my access requests my-data-access-order:updateUpdate my access requests within the granted scope.Own

Delete my access requests my-data-access-order:deleteDelete my access requests within the granted scope.Own

See granted data my access requests my-data-access-order:dataSee granted data my access requests within the granted scope.Own

2 of 2

View all access requests admin-data-access-order:viewView all access requests within the granted scope.AllOwn dept.Depts.

Decide all access requests admin-data-access-order:decideDecide all access requests within the granted scope. Sensitive: its holder needs two-step verification and a direct grant needs a reason.SensitiveAllOwn dept.Depts.

9 of 9

View events event:viewView events within the granted scope.AllOwn dept.Depts.Team

Create events event:createCreate events within the granted scope.AllOwn dept.Depts.Team

Update events event:updateUpdate events within the granted scope.AllOwn dept.Depts.Team

Delete events event:deleteDelete events within the granted scope.AllOwn dept.Depts.Team

Clone events event:cloneClone events within the granted scope.AllOwn dept.Depts.Team

Postpone or cancel events event:cancelPostpone or cancel events within the granted scope.AllOwn dept.Depts.Team

Archive events event:archiveArchive events within the granted scope.AllOwn dept.Depts.Team

Update event status event-status:updateUpdate event status within the granted scope.AllOwn dept.Depts.

View statistics statistics:viewView statistics within the granted scope.AllOwn dept.Depts.

6 of 6

View event audience event-audience:viewView event audience within the granted scope.AllOwn dept.Depts.Team

Add event audience event-audience:addAdd event audience within the granted scope.AllOwn dept.Depts.Team

Invite event audience event-audience:inviteInvite event audience within the granted scope.AllOwn dept.Depts.Team

Manage event audience event-audience:manageManage event audience within the granted scope.AllOwn dept.Depts.Team

Record attendance event audience event-audience:record-attendanceRecord attendance event audience within the granted scope.AllOwn dept.Depts.Team

Create audience invitations audience-invitation:createCreate audience invitations within the granted scope.AllOwn dept.Depts.Team

8 of 8

View event locations event-location:viewView event locations within the granted scope.All

Create event locations event-location:createCreate event locations within the granted scope.All

Update event locations event-location:updateUpdate event locations within the granted scope.All

Delete event locations event-location:deleteDelete event locations within the granted scope.All

View event types event-type:viewView event types within the granted scope.All

Create event types event-type:createCreate event types within the granted scope.All

Update event types event-type:updateUpdate event types within the granted scope.All

Delete event types event-type:deleteDelete event types within the granted scope.All

4 of 4

View certificates certificate:viewView certificates within the granted scope.AllOwn dept.Depts.Team

Issue certificates certificate:issueIssue certificates within the granted scope.AllOwn dept.Depts.Team

Revoke certificates certificate:revokeRevoke certificates within the granted scope. Sensitive: its holder needs two-step verification and a direct grant needs a reason.SensitiveAllOwn dept.Depts.Team

Manage certificates certificate:manageManage certificates within the granted scope.AllOwn dept.Depts.Team

5 of 5

View event evaluation event-evaluation:viewView event evaluation within the granted scope.AllOwn dept.Depts.Team

Manage event evaluation event-evaluation:manageManage event evaluation within the granted scope.AllOwn dept.Depts.Team

Export event evaluation event-evaluation:exportExport event evaluation within the granted scope.AllOwn dept.Depts.Team

See respondents’ identities in event evaluations event-evaluation:view-identitiesSee respondents’ identities in event evaluations within the granted scope. Sensitive: its holder needs two-step verification and a direct grant needs a reason.SensitiveAllOwn dept.Depts.Team

Manage the question bank question-bank:manageManage the question bank within the granted scope.AllOwn dept.Depts.

5 of 6

View the audit log log:viewView the audit log within the granted scope. Sensitive: its holder needs two-step verification and a direct grant needs a reason.SensitiveAllOwn dept.Depts.

View integration logs integration-log:viewView integration logs within the granted scope.All

View the message log notification-log:viewView the message log within the granted scope.AllOwn dept.Depts.

View background jobs job:viewView background jobs within the granted scope.All

Run a job by hand job:runRun a scheduled job now, outside its slot.SensitiveAll

Export the audit log log:exportExport log entries with the applied filters to a file.SensitiveAllOwn dept.Depts.

0 of 3

Manage data-subject requests dsr:manageManage data-subject requests within the granted scope. Sensitive: its holder needs two-step verification and a direct grant needs a reason.SensitiveAll

View consents consent:viewView consents within the granted scope.All

Retention policies retention:manageSet retention periods within their legal bounds.SensitiveAll

4 of 7

View settings settings:viewView settings within the granted scope.All

Update settings settings:updateUpdate settings within the granted scope. Sensitive: its holder needs two-step verification and a direct grant needs a reason.SensitiveAll

View message templates notification-template:viewEmail, SMS, WhatsApp and in-app templates.All

Edit message templates notification-template:updateEdit template text and variables, restore earlier versions.All

Security settings settings:securitySingle sign-on, two-step verification, password policy and sessions.SensitiveAll

Configure integrations integration:configureThe survey system and message providers.SensitiveAll

Manage API keys api-key:manageCreate and revoke API client keys.SensitiveAll

Notifications

AdminSystemProtected

Role details

Permission editor

Change impact

Choose a guided tour

AdminSystemProtected

Role details

Permission editor

Change impact