Admin
Maintains organizational reference data and configures scoped access without taking the independent review decision.
Can
- Manage Organizations, business units, team members, Users
- View Controls, Assessments, operation receipts
- Anti-Money Laundering
- Roles and permissions
Who can do what in Anti-Money Laundering
Agree who prepares evidence, who decides and who handles restricted subjects.
Who can do what
| Role | Risk and Scope Planning | Control Testing | Independent Review | Monitoring Alerts | Remediation and Retesting | Restricted Subject Handling |
|---|---|---|---|---|---|---|
| Admin | Edit | View | View | View | View | Edit |
| AML Program Manager | Edit | Edit | Edit | Edit | Edit | — |
| Control Tester | View | Edit | Edit | — | View | — |
| Independent Reviewer | View | View | Approve | Approve | Approve | — |
| Remediation Owner | View | View | View | — | Edit | — |
| Data Custodian | View | — | — | — | — | Approve |
Each role in detail
AML Program Manager
Owns the assessment plan and prepares monitoring alerts for independent review.
Can
- Manage business units, Risks, Controls, Assessments, monitoring alerts, Findings
- View assessment tests, record attachments, corrective actions, Retests, review decisions, operation receipts
Starts on: Assessment Calendar
Control Tester
Records control samples and the evidence needed for review within assigned assessments.
Can
- Manage assessment tests, record attachments
- View Assessments, Controls, Risks, business units, Findings
Starts on: Assessment Calendar
Independent Reviewer
Approves scoped assessment revisions, decides monitoring alerts and independently evaluates remediation evidence.
Can
- Manage review decisions, Retests
- View Assessments, assessment tests, record attachments, Controls, Risks, monitoring alerts, Findings, corrective actions, operation receipts
Reviews and approves
- Approve Assessments, monitoring alerts, corrective actions, Findings
Starts on: Assessment Calendar
Remediation Owner
Owns the corrective work and submits completion evidence for an independent retest.
Can
- Manage corrective actions
- View Findings, Assessments, Controls, Retests
Starts on: Submitted Corrective Actions
Data Custodian
Authorises purpose-limited subject access and records the scope and authority of disclosures.
Can
- Manage restricted subjects, access grants, disclosure events
- View team members
Reviews and approves
- Approve access grants
Starts on: Restricted Subject Retention
Set up Anti-Money Laundering your way.
Start free, then use Proto to change fields, steps and approvals before your team goes live.