Permissions and access (authentication and authorisation)

​

Permission levels

Authorisation, what someone can do once signed in, is their permission level: everyone has exactly one, set when you add them. Only an Admin can add people or change someone’s level. Some screens use other names:

• The People table’s Permissions column shows View-only as Viewer.
• The People table’s filter shows User as Editor.
• The multi-factor authentication setting shows Staff portal only as Staff Portal.

To give an auditor access, use View-only. Who can edit a specific document is set in that document’s Permissions.

​

The person sheet

Click anyone on the People tab to open their sheet. Authentication shows an icon per sign-in method:

• The envelope is Email verification.
• The phone is Authenticator app enrolled. It’s orange when an authenticator app is required and they haven’t set one up yet.

​

Change someone’s permission level

​

Sign-in and multi-factor authentication

Authentication is how someone proves who they are, and it’s passwordless: a link and code sent to their email, or their Google account. Our team can set up single sign-on (SSO) with another identity provider. See Navigating Assuric for the sign-in flow. Multi-factor authentication adds an authenticator app to sign-in:

• Each person sets up their own from their account menu (their initial, top right): Authentication → Account Security.
• An Admin can require it per permission level, not per role, from Settings → Authentication in the sidebar.

​

Related articles