Who this is for: All users; administrators assigning roles.
Access to the Audit Module is controlled by an audit role, separate from your COSHH and Incident roles. There are four defaults.
Role | In one line |
Audit Viewer | Read-only. Sees records, findings and reports |
Auditor | Schedules and conducts audits, and records findings, root causes and corrective actions |
Audit Manager | Runs the programme — templates, scheduling, review, verification and auditor competence |
Audit Administrator | Everything an Audit Manager can do, plus Audit Settings |
Where they live. Settings → Users & Locations → Roles & Permissions → Audit Roles, alongside any custom roles your organisation has added.
What each role can do by default:
Permission | Viewer | Auditor | Manager | Administrator |
View Audit Templates | Yes | Yes | Yes | Yes |
Manage My Audit Templates | — | — | Yes | Yes |
Submit Audit Template Request | Yes | Yes | Yes | Yes |
View Audit Records | Yes | Yes | Yes | Yes |
Schedule Audits | — | Yes | Yes | Yes |
Conduct Audits | — | Yes | Yes | Yes |
Archive Audits | — | — | Yes | Yes |
Cancel Scheduled Audits | — | — | Yes | Yes |
Technical Review | — | — | Yes | Yes |
Manage Audit Settings | — | — | — | Yes |
Manage Auditor Competency | — | — | Yes | Yes |
View Audit Reports | Yes | Yes | Yes | Yes |
Export Audit Reports | — | — | Yes | Yes |
View Findings | Yes | Yes | Yes | Yes |
Manage Findings | — | Yes | Yes | Yes |
Manage Corrective Actions | — | Yes | Yes | Yes |
Manage Root Cause | — | Yes | Yes | Yes |
Verify & Close Findings | — | — | Yes | Yes |
The two permissions that decide the boundaries: Technical Review and Verify & Close Findings are what make someone a reviewer or verifier, and Manage Audit Settings is the line between an Audit Manager and an Audit Administrator.
Custom roles can be created with any combination of permissions — see 10.10.
Related: 1.9 I can't see Audits in the menu · 10.9 The audit permissions reference · 10.10 Creating and viewing audit roles