> ## Documentation Index
> Fetch the complete documentation index at: https://docs.p36-csq.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Roles and Permissions

> Detailed guide to role-based access control in the CSQ Platform

## Overview

The CSQ Platform implements a comprehensive role-based access control (RBAC) system that ensures users have appropriate access to features and data based on their responsibilities and organizational requirements.

## Role-Based Access Control Model

<CardGroup cols={2}>
  <Card title="Roles" icon="users">
    Collections of permissions assigned to users based on job functions
  </Card>

  <Card title="Permissions" icon="key">
    Specific actions or access rights within the platform
  </Card>
</CardGroup>

## Built-in Roles

### Observer

<Tabs>
  <Tab title="Permissions">
    **Read-Only Access**

    * View dashboard and widgets
    * Access use case status information
    * View reports and analytics
    * Browse help documentation
    * Receive notifications (view only)
  </Tab>

  <Tab title="Restrictions">
    **Cannot Perform**

    * Create or modify use cases
    * Change system configurations
    * Manage users or roles
    * Delete or archive data
    * Configure integrations
  </Tab>

  <Tab title="Use Cases">
    **Ideal For**

    * Executive stakeholders
    * Compliance officers
    * External auditors
    * Reporting consumers
    * Business analysts
  </Tab>
</Tabs>

### Use Case Designer

<AccordionGroup>
  <Accordion title="Core Capabilities">
    **Use Case Management**

    * Create new use cases
    * Edit existing use cases
    * Configure monitoring parameters
    * Set up notifications and alerts
    * Manage use case lifecycle
    * Archive and restore use cases
  </Accordion>

  <Accordion title="Data Management">
    **Master Data Access**

    * Manage service definitions
    * Configure requirements templates
    * Define risk categories
    * Maintain notification lists
    * Update configuration parameters
  </Accordion>

  <Accordion title="Reporting Capabilities">
    **Report Generation**

    * Generate all report types
    * Schedule automated reports
    * Export report data
    * Share reports with stakeholders
    * Configure report templates
  </Accordion>
</AccordionGroup>

### Administrator

<Info>
  Administrators have comprehensive system access and should be limited to
  trusted personnel.
</Info>

#### Administrative Permissions

<Steps>
  <Step title="User Management">
    * Create, modify, and deactivate user accounts - Assign and modify user
      roles - Reset passwords and unlock accounts - Configure user preferences and
      settings
  </Step>

  <Step title="System Configuration">
    * Configure system-wide settings - Manage integrations and APIs - Set up
      authentication methods - Configure backup and recovery
  </Step>

  <Step title="Security Management">
    * Manage security policies - Configure access controls - Review audit logs -
      Manage encryption settings
  </Step>

  <Step title="Platform Maintenance">
    * Perform system maintenance - Manage system updates - Monitor system
      performance - Configure alerting and monitoring
  </Step>
</Steps>

## Permission Categories

### Functional Permissions

| Permission              | Observer | Use Case Designer | Administrator |
| ----------------------- | -------- | ----------------- | ------------- |
| View dashboard          | ✅        | ✅                 | ✅             |
| View use cases          | ✅        | ✅                 | ✅             |
| Create use cases        | ❌        | ✅                 | ✅             |
| Edit use cases          | ❌        | ✅                 | ✅             |
| Delete use cases        | ❌        | ✅                 | ✅             |
| Approve use cases       | ❌        | ✅                 | ✅             |
| Generate reports        | ✅        | ✅                 | ✅             |
| Configure notifications | ❌        | ✅                 | ✅             |
| Manage master data      | ❌        | ✅                 | ✅             |
| User management         | ❌        | ❌                 | ✅             |
| System configuration    | ❌        | ❌                 | ✅             |