Skip to main content

Role Permissions Matrix

This reference lists all Report Forge roles and the complete set of actions each role can perform. Use this page to decide which role to assign when inviting a new user, and to check what a user can and cannot do.


Roles overview

RolePurposeTypical user
ViewerRead-only access to published outputs shared with them.Client, senior stakeholder, auditor.
ContributorFill in edition sections they are assigned to.Project team member, discipline lead.
ReviewerReview editions, add comments, request changes, approve.Report manager, PMO reviewer, client representative.
Report OwnerFull blueprint and edition management for their assigned blueprints.Report coordinator, PMO officer.
AdminFull workspace access including user management and org settings.System administrator, PMO manager.

Permissions matrix

Blueprint management

ActionViewerContributorReviewerReport OwnerAdmin
View blueprint list
View published blueprint
Create blueprint
Edit draft blueprint
Publish blueprint
Archive blueprint
Delete blueprint
View blueprint version history
Restore previous blueprint version
Duplicate blueprint

Edition management

ActionViewerContributorReviewerReport OwnerAdmin
View edition list
View edition (read-only)
Create edition
Edit assigned sections (form mode)
Edit assigned sections (grid mode)
Edit any section
Submit edition for review
Add review comments
Request changes
Approve edition
Close edition
Re-open approved edition
Delete edition

Output and export

ActionViewerContributorReviewerReport OwnerAdmin
View published output in viewer
Export to PDF
Export to Excel
Export to Word
Generate new output
Design / edit output template
Configure export settings
Schedule automated export

Admin and workspace

ActionViewerContributorReviewerReport OwnerAdmin
Invite users
Manage user roles
Remove users
Configure workspace settings
Manage projects / portfolios
Configure notification settings
View audit log
Configure API access

Assigning and changing roles

Assign a role when inviting a new user

  1. Navigate to Admin → Team.
  2. Click + Invite user.
  3. Enter the user's email address.
  4. Select a role from the dropdown.
  5. Click Send invite.

Change an existing user's role

  1. Navigate to Admin → Team.
  2. Find the user by name or email.
  3. Click Edit beside the user's name.
  4. Select the new role.
  5. Click Save.

Role changes take effect immediately. The user does not need to log out.


Section-level permissions

In addition to the workspace role, section-level permissions control which sections a Contributor can edit within an edition:

Section permissionEffect
No accessThe section is hidden from this user in the edition.
View onlyThe section is visible but read-only.
EditThe user can edit all rows in the section.
Edit (assigned rows only)The user can only edit rows they created or are assigned to.

Section permissions are configured in the Blueprint Designer → Section → Permissions tab. They apply to Contributor-role users; Reviewers and Report Owners are not restricted by section permissions.

See Section Permissions for full configuration details.