Roles & Permissions Matrix

This reference table outlines the functional entitlements assigned to each standard role in OrviQ.

---

Functional Area	Action	Tenant Admin	Compliance Manager	Risk Manager	Control Owner	Auditor	Read Only
Users & Security	Create/Edit Users	Yes	No	No	No	No	No
	Configure AI Settings	Yes	No	No	No	No	No
	Manage SLA Policies	Yes	No	No	No	No	No
Requirements	Modify Scope / Applicability	Yes	Yes	No	No	Read	Read
	Set Compliance Determination	Yes	Yes	No	No	Read	Read
Controls	Create / Edit Controls	Yes	Yes	Read	Yes	Read	Read
	Assess Design Adequacy	Yes	Yes	Read	No	Yes	Read
	Perform Control Testing	Yes	Yes	Read	Contributor	Yes	Read
Crosswalk	Create Crosswalk Mappings	Yes	Yes	Read	Yes	Read	Read
	Approve Crosswalk Mappings	Yes	Yes	No	No	Read	Read
Evidence	Upload Evidence Artifacts	Yes	Yes	Yes	Yes	Read	Read
	Verify / Reject Evidence	Yes	Yes	Yes	No	Yes	Read
Risks & Findings	Create / Edit Risks	Yes	Read	Yes	Contributor	Read	Read
	Log Findings	Yes	Yes	Yes	Yes	Yes	Read
	Assign Action Plans	Yes	Yes	Yes	Yes	Yes	Read
	Request Exceptions	Yes	Yes	Yes	Yes	Read	Read
	Approve Exceptions	Yes	Yes	Yes	No	No	No
Policies	Author Draft Policies	Yes	Yes	Yes	Yes	Read	Read
	Publish Corporate Policies	Yes	Yes	No	No	Read	Read
Audits	Manage Audit Engagements	Yes	Read	Read	Contributor	Yes	Read
	Document Workpapers	Yes	Read	Read	Contributor	Yes	Read