Admin
Configures organization structure and access for the assessment workspace.
Can
- Manage Organizations, business units, team members, Users
- View Assessments, assessment tests, Findings, review decisions
- GRC for Healthcare and Hospitals
- Roles and access
Who can do what in GRC for Healthcare and Hospitals
Assign preparation and review to the right people.
How permissions work
Scope each person
Tie a team member to the organization they serve and review access when their role changes.
Separate preparation from judgement
The person who owns a corrective action cannot be its independent retest reviewer.
Inspect the record
Review direct record and attachment access as well as list screens before opening the pilot.
Who can do what
| Role | Assessment planning | Risks and controls | Control testing | Findings and remediation | Care compliance reviews | Evidence and operations |
|---|---|---|---|---|---|---|
| Admin | Edit | Edit | View | View | Edit | View |
| Assessment Owner | Edit | View | Edit | View | — | View |
| Control Owner | — | Edit | Edit | Edit | — | — |
| Remediation Owner | — | View | View | Edit | — | — |
| Retest Reviewer | — | — | View | Approve | — | — |
| Compliance Reviewer | View | — | View | — | Approve | Edit |
Each role in detail
Assessment Owner
Plans assessment scope and follows test progress for assigned work.
Can
- Manage Assessments, assessment tests
- View Controls, Findings, record attachments, operation receipts
Starts on: Assessment period schedule
Control Owner
Maintains assigned controls and supplies the evidence needed for testing.
Can
- Manage Controls
- View Risks, assessment tests, Findings
Starts on: My risks
Remediation Owner
Prepares corrective work and submits evidence for independent retest.
Can
- Manage corrective actions
- View Findings, Retests, Controls
Starts on: Actions submitted for retest
Retest Reviewer
Independently tests whether a finding can close.
Can
- Manage Retests
- View Findings, corrective actions, assessment tests
Reviews and approves
- Approve corrective actions
Starts on: Actions submitted for retest
Compliance Reviewer
Reviews care assurance submissions and records a reasoned decision.
Can
- Manage review decisions, care compliance reviews
- View Assessments, assessment tests, record attachments
Reviews and approves
- Approve care compliance reviews
Starts on: Assessment period schedule
Set up GRC for Healthcare and Hospitals your way.
Start free, then use Proto to change fields, steps and approvals before your team goes live.