Introduction
User Roles in SAFE define data access, operational permissions, and the scope of control across the platform. SAFE supports three distinct role types to address varying levels of access control and flexibility:
Default Roles (Admin, Viewer): Out-of-the-box roles with predefined permissions
Custom Roles: Advanced roles with granular, action-level permissions
Default Roles
Default roles are predefined by SAFE and cannot be modified or customized.
Admin - Full access to SAFE Platform
Viewer - Read-only access to SAFE Platform
CTEM Admin - Full access to CTEM only
CTEM Viewer - Read-only access to CTEM only
TPRM Admin - Full access to TPRM only
TPRM Viewer - Read-only access to TPRM only
CRQ Admin - Full access to CRQ only
CRQ Viewer - Read-only access to CRQ only
Key Characteristics
Predefined and managed by SAFE
Cannot be configured or customized
Designed to provide standardized access control
Default Roles User Access - Admin and Viewer
SAFE Modules | Features | Admin | Viewer |
|---|---|---|---|
Dashboards | View all Dashboards | Yes | Yes |
Add Dashboard | Yes | Yes | |
Duplicate Dashboard | Yes | Yes | |
Delete Dashboard | Yes | Yes | |
Risk Scenarios | Create Risk Scenarios | Yes | No |
View Risk Scenarios | Yes | Yes | |
Edit Risk Scenario | Yes | No | |
Duplicate Risk Scenario | Yes | No | |
Delete Risk Scenario | Yes | No | |
Edit Control Parameters | Yes | No | |
View Scoring Factors | Yes | Yes | |
Edit Scoring Factors | Yes | No | |
Groups | Create Group | Yes | No |
View Groups List | Yes | Yes | |
Edit Group | Yes | No | |
Duplicate Group | Yes | No | |
Delete Group | Yes | No | |
View Questionnaire | Yes | Yes | |
Submit Questionnaire Assessment | Yes | No | |
Reuse Existing Questionnaire Assessment | Yes | No | |
Controls – What If Analysis | Yes | No | |
Edit Control Parameter | Yes | No | |
Assets | View Asset List | Yes | Yes |
Integrations | View List of Supported & Configured Integrations | Yes | No |
Configure Integrations | Yes | No | |
Control Centre | View Controls List & Details | Yes | Yes |
Edit Control Parameter | Yes | No | |
What If Analysis | Yes | Yes | |
Reuse Control Maturity Assessment | Yes | No | |
Reset Control Maturity Assessment | Yes | No | |
Findings | View Findings | Yes | Yes |
Export Findings | Yes | Yes | |
Create Ticket from Findings | Yes | No | |
Create Exception from Findings | Yes | No | |
Remove Findings from Existing Ticket | Yes | No | |
Remove Findings from Existing Exception | Yes | No | |
Tickets | View Tickets | Yes | Yes |
Create Ticket | Yes | No | |
Edit / Unlink Ticket | Yes | No | |
Delete Ticket | Yes | No | |
Settings | Create Ticketing Rule | Yes | No |
My Profile | Yes | Yes | |
Security | Yes | Yes | |
API Credentials | Yes | No | |
User Management | Yes | No | |
Role Management | Yes | No | |
Company Settings | Yes | No | |
Advanced | Yes | No | |
About | Yes | Yes | |
Threat Center | View Threat Center | Yes | Yes |
Third-Party | Add Third Party (Individual & Bulk Upload) | Yes | No |
View Third Parties | Yes | Yes | |
Edit Third Party | Yes | No | |
Delete Third Party | Yes | No | |
Edit Third Party Status | Yes | No | |
View Third Party Details | Yes | Yes | |
Submit Questionnaire Assessment | Yes | No | |
Edit Control Parameter | Yes | No | |
Upload Documents | Yes | No |
Default Roles User Access - CTEM Admin and CTEM Viewer
SAFE Modules | Features | Admin | Viewer |
|---|---|---|---|
Dashboards | View all Dashboards | Yes | Yes |
Add Dashboard | Yes | Yes | |
Duplicate Dashboard | Yes | Yes | |
Delete Dashboard | Yes | Yes | |
Groups | Create Group | Yes | No |
View Groups List | Yes | Yes | |
Edit Group | Yes | No | |
Duplicate Group | Yes | No | |
Delete Group | Yes | No | |
Assets | View Asset List | Yes | Yes |
Integrations | View List of Supported & Configured Integrations | Yes | No |
Configure Integrations | Yes | No | |
Findings | View Findings | Yes | Yes |
Export Findings | Yes | Yes | |
Create Ticket from Findings | Yes | No | |
Create Exception from Findings | Yes | No | |
Remove Findings from Existing Ticket | Yes | No | |
Remove Findings from Existing Exception | Yes | No | |
Tickets | View Tickets | Yes | Yes |
Create Ticket | Yes | No | |
Edit / Unlink Ticket | Yes | No | |
Delete Ticket | Yes | No | |
Settings | Create Ticketing Rule | Yes | No |
My Profile | Yes | Yes | |
Security | Yes | Yes | |
API Credentials | Yes | No | |
User Management | Yes | No | |
Role Management | Yes | No | |
Company Settings | Yes | No | |
Advanced | Yes | No | |
About | Yes | Yes | |
Threat Center | View Threat Center | Yes | Yes |
Default Roles User Access - TPRM
SAFE Modules | Features | Admin | Viewer |
|---|---|---|---|
Dashboards | View all Dashboards | Yes | Yes |
Add Dashboard | Yes | Yes | |
Duplicate Dashboard | Yes | Yes | |
Delete Dashboard | Yes | Yes | |
Third-Party | Add Third Party (Individual & Bulk Upload) | Yes | |
View Third Parties | Yes | Yes | |
Edit Third Party | Yes | No | |
Delete Third Party | Yes | No | |
Edit Third | Yes | No | |
View Third Party Details | Yes | Yes | |
Submit Questionnaire Assessment | Yes | No | |
Edit Control Parameter | Yes | No | |
Upload Documents | Yes | No | |
Integrations | View List of Supported & Configured Integrations | Yes | No |
Configure Integrations | Yes | No | |
Settings | My Profile | Yes | Yes |
API Credentials | Yes | No | |
User Management | Yes | No | |
Role Management | Yes | No | |
Invitations | Yes | No | |
Custom Fields | Yes | No | |
Company Settings | Yes | No | |
Third-party Tiering | Yes | No | |
Advanced | Yes | No | |
About | Yes | Yes | |
Automation Settings | Yes | No | |
Default Notifications | Yes | No |
Default Roles User Access - CRQ Admin and CRQ Viewer
SAFE Modules | Features | Admin | Viewer |
|---|---|---|---|
Dashboards | View all Dashboards | Yes | Yes |
Add Dashboard | Yes | Yes | |
Duplicate Dashboard | Yes | Yes | |
Delete Dashboard | Yes | Yes | |
Risk Scenarios | Create Risk Scenarios | Yes | |
View Risk Scenarios | Yes | Yes | |
Edit Risk Scenario | Yes | No | |
Duplicate Risk Scenario | Yes | No | |
Delete Risk Scenario | Yes | No | |
Edit Control Parameters | Yes | No | |
View Scoring Factors | Yes | Yes | |
Edit Scoring Factors | Yes | No | |
Groups | Create Group | Yes | No |
View Groups List | Yes | Yes | |
Edit Group | Yes | No | |
Duplicate Group | Yes | No | |
Delete Group | Yes | No | |
View Questionnaire | Yes | Yes | |
Submit Questionnaire Assessment | Yes | No | |
Reuse Existing Questionnaire Assessment | Yes | No | |
Controls - What If Analysis | Yes | No | |
Edit Control Parameter | Yes | No | |
People | View Users List | Yes | Yes |
Edit Users | Yes | No | |
Delete Users | Yes | No | |
Technology | View Asset List | Yes | Yes |
Delete Assets | Yes | No | |
Edit Assets | Yes | No | |
Bulk Delete Assets | Yes | No | |
Bulk Edit Assets | Yes | No | |
Integrations | View List of Supported & Configured Integrations | Yes | No |
Configure Integrations | No (Future) | No | |
Control Centre | View Controls List & Details | Yes | Yes |
Edit Control Parameter | Yes | No | |
What If Analysis | Yes | Yes | |
Reuse Control Maturity Assessment | Yes | No | |
Reset Control Maturity Assessment | Yes | No | |
Questionnaire | View Questionnaires | Yes | Yes |
Submit Questionnaire Assessment | Yes | No | |
Settings | My Profile | Yes | Yes |
Security | Yes | Yes | |
API Credentials | Yes | No | |
User Management | Yes | No | |
Role Management | Yes | No | |
Invitations | Yes | No | |
Custom Fields | Yes | No | |
Attack Surface | Yes | No | |
Company Settings | Yes | No | |
Advanced | Yes | No | |
About | Yes | Yes |