How do I review and update users' access rights and assignments?

The "Access and assignments" menu in the User management gives you a quick overview of all rights and responsibilities of a certain user. You can remove or make replacements in bulk with just a few clicks.

Go to the User management in the menu and select the user you wish to see the accesses and assignments for.

Note: You either need Administrator access or have the User administrator role in order to access this section in Impero.

What can I view within this menu?

You can view the user's assigned groups.
You can view controls where the user is either assigned as responsible or reviewer.
Get an overview of which programs the user has access to.
You can view the tests, testing programs and testing activities the user is part of in Control Testing.
You can get a risk entity overview.
You can see which entities the user has access to.

Groups:

Click "Groups" in the menu to see all groups the user is a member of. If a group is assigned to any controls, you can click "+" to see the name of the controls.

It is possible to either replace or remove the user from the user groups.

Direct control assignments:

Click "Direct control assignments" in the menu to view the controls the user is either responsible for or reviewer of. You can see how the controls are designed by clicking on the title of the control or jump directly to the control program by clicking on the title of the program.

If the user is tagged with any user specific tags, it is possible to view them in the tags column. Hover over the categories to see all tags.

You can also either replace or remove the user from the controls.

Note! The replaced user will inherit all tags from the previous user once replaced.

Programs:

Click "Programs" in the menu to view the programs the user has an admin, edit or view access to.

You can see details of the control program by clicking on the title.
The type of access rights.
Whether or not the program is active.
Which tags there have been used on the program.

Pending activities:

Click "Pending activities" to view the activities the user is assigned to either directly or via groups.

Enables you to see which control program the activity is related to.
You can view the due dates.
You can view which role the user is assigned as.

Control testing:

Click "Control testing" in the menu to see everything the user is involved in within Control Testing. The menu item expands into three sub-sections: "Test assignments", "Testing programs" and "Test activities". The number in brackets next to "Control testing" is the total of the numbers shown next to the three sub-sections.

Reports:

Click "Reports" to get an overview of the reports the user has created and the push reports the user either has created or received.

Risk management:

Click "Risk management" to get an overview of all risk directories or parts of the risk directories only for specific entities, to which the user has access to.

Entities:

Click "Entities" in the menu to view all entities the user has access to. For each entity, the list shows the name of the entity, the description of the entity, and the access rights the user has to the controls and to the risks of that entity. If the user has no access of one type to an entity, the cell for that type is empty.

To take access away from the user in several entities at once, tick the entities in the list and click either "Remove control access right" or "Remove risk access right" above the list. Both actions are greyed out and not actionable until you have ticked at least one entity.

Note: The menu item "Entities" is only shown for organizations that use entities.

Learn more: