Separate case preparation, independent review, service configuration and read access.
The Citizen Service Portal Operator prepares applications, requirements, evidence and follow-up actions within the authorized organization scope.
The Citizen Service Portal Reviewer records review decisions and reads the supporting case information. The person who prepared the case cannot provide its independent approval.
The Citizen Service Portal Administrator maintains service definitions. Configuration access does not authorize a case decision.
The Read Only Analyst reads authorized records and summaries without creating or changing case information.
Agree Admin access to staff, organization, account and mapping configuration during implementation. Keep that responsibility separate from case approval.
| Role | Service Registration | Requirements and Evidence | Independent Review | Service Delivery | Follow-up and Corrections | Service Configuration |
|---|---|---|---|---|---|---|
| Read Only Analyst | View | View | View | View | View | View |
| Citizen Service Portal Reviewer | View | View | Edit | View | View | View |
| Citizen Service Portal Operator | Edit | Edit | Edit | Edit | Edit | View |
| Citizen Service Portal Administrator | View | View | View | View | View | Edit |
| Admin | Edit | Edit | Edit | View | Edit | Edit |
Reads authorized summaries and aggregates across every table plus the four portal pages. No record creation or editing, no schema or administrative capability.
Starts on: Operation Run Monitor
Reviews independent assigned work: record entry on Review Decisions only, read-only on every other table. Reviewers cannot approve their own preparation; the workflow guards enforce reviewer independence.
Starts on: Submitted Application Inbox
Prepares assigned work: record entry on Service Applications, Application Requirements, Follow Up Actions and Evidence Documents, read-only on configuration, review and provenance tables. Scope to authorized organizations is enforced by workflow guards.
Starts on: Submitted Application Inbox
Maintains approved configuration: record entry on Public Services, read-only on all operational, review and provenance tables, and access to all four portal pages. No schema editing, deletion, bulk operations or export grants.
Starts on: Service Applications Workspace
Maintains organization, staff, account and mapping configuration under the access agreed during setup, while case decisions remain with the independent reviewer.
Start free, then use Proto to change fields, steps and approvals before your team goes live.