1. Construction GRC
  2. Roles and access
Reference

Who can do what in Construction GRC

Assign inspection, testing, correction and review work to the right people.

How permissions work

Start with an organization

Link team members to the organization that owns their work and use that scope when assigning assessments.

Separate doing from deciding

A correction owner can submit evidence; a different reviewer must retest before a finding closes.

Review evidence visibility

Assessment files carry an internal or shared visibility choice. Agree who may view each category before loading sensitive material.

Check direct access

Rehearse the same record through the app and its API so a hidden screen is not mistaken for an access rule.

Who can do what

Permissions by role
RoleSite compliance checksAssessments and scopeRisks and controlsControl testingFindings and corrective actionsIndependent retestsEvidence and documents
AdminEditEditEdit——Edit—
Compliance ManagerEditEditEditEditEditView—
Assessment Owner—EditViewEditViewViewEdit
Site InspectorEditView—————
Control Owner——EditEditEdit——
Finding Owner———ViewEditEdit—
Independent Reviewer———ViewViewEditView

Each role in detail

Admin

Maintains organization, people and access settings for the compliance workspace.

Can

  • Manage Organizations, business units, team members, Users
  • View Assessments, site compliance checks, operation receipts

Compliance Manager

Oversees site checks, assessment scope and exceptions across the organization.

Can

  • Manage Assessments, site compliance checks, Risks, Controls
  • View assessment tests, Findings, corrective actions, Retests

Starts on: Assessment period schedule

Assessment Owner

Scopes assessments, plans tests and follows findings through correction.

Can

  • Manage Assessments, assessment tests, record attachments
  • View Risks, Controls, Findings, corrective actions, Retests

Starts on: Assessment period schedule

Site Inspector

Records inspected sites, permit references and open safety issues.

Can

  • Manage site compliance checks
  • View Assessments, Organizations

Starts on: Site compliance board

Control Owner

Maintains the control and supplies evidence for its assessment tests.

Can

  • Manage Controls
  • View Risks, assessment tests, Findings

Starts on: Current controls

Finding Owner

Owns corrective action plans and submits evidence of completed work.

Can

  • Manage corrective actions
  • View Findings, assessment tests, Retests

Starts on: Open findings

Independent Reviewer

Retests corrected findings and records the independent closure decision.

Can

  • Manage Retests
  • View Findings, corrective actions, assessment tests, record attachments

Starts on: Open findings

Set up Construction GRC your way.

Start free, then use Proto to change fields, steps and approvals before your team goes live.

How to get started