Who this is for: Audit Administrators.
Audit roles live in Settings → Users & Locations → Roles & Permissions → Audit Roles. The four defaults are listed there — see 1.6 for what each is for — alongside any custom roles your organisation has added. They are not part of Audit Settings.
Seeing what a role can do
Use View Role. Permissions are shown in four groups:
Group | Covers |
Audit Template Access | Viewing the library, managing the company collection, building templates |
Audit Execution | Schedule, Conduct, Archive, Cancel Scheduled Audits, Technical Review, Manage Audit Settings, Manage Auditor Competency |
Audit Reports | Seeing published reports and the reporting area |
Findings and Actions | Working with findings, including Manage Root Cause and Verify & Close Findings |
Read the role before you assign it. The two that catch people out are both in Audit Execution: Technical Review decides who can be put forward as a technical reviewer, and Manage Audit Settings is what separates an Audit Manager from an Audit Administrator.
Creating a custom role
The four defaults cover most organisations. Where they do not:
Go to Settings → Users & Locations → Roles & Permissions.
Select the Audit Roles tab.
Select Add Role.
Give it a Title.
Switch on the permissions the role needs, grouped as above.
Save.
Two custom roles worth considering:
A reviewer-only role — View Audit Records, View Audit Reports, View Findings, Technical Review and Verify & Close Findings. Someone who signs off audits and findings but never conducts an audit.
A template author role — Audit Template Access only, with no execution permissions. A quality manager who builds the templates but does not run the audits.
Related: 1.6 The four audit roles and what each can do · 10.9 The audit permissions reference · 10.12 Access problems