Auditor
Read authorized evidence and reports in a scoped, read-only audit view. No record writes and no action execution.
Can
- Access assigned records
Starts on: Completed Applications
Give preparers, reviewers, auditors and administrators the right scope.
A Control Owner prepares the assessment; an Independent Assurance Reviewer records the decision against its revision.
Auditor access is read-only for assigned evidence and reports. Attachment visibility distinguishes Internal from Shared files.
App Administrator maintains organizations, business units and team members without taking on review authority.
| Role | Organization and access | Assessment planning | Control test records | Retirement applications | Review and evidence | Reconciliation and reporting |
|---|---|---|---|---|---|---|
| Auditor | — | — | — | — | — | — |
| App Administrator | Edit | Edit | — | — | Edit | — |
| Control Owner | — | Edit | Edit | Edit | Edit | — |
| Independent Assurance Reviewer | — | — | — | — | — | — |
| Assessment Tester | — | Edit | Edit | Edit | Edit | View |
Read authorized evidence and reports in a scoped, read-only audit view. No record writes and no action execution.
Starts on: Completed Applications
Maintain organization configuration and membership. Membership administration does not confer assessment review authority.
Starts on: Draft Assessments
Prepare assigned assessments, applications and attachments within the organization scope. Review decisions remain with the independent reviewer.
Starts on: Assessment Period Schedule
Record an independent assessment decision against the reviewed revision and inspect linked evidence. The reviewer cannot approve their own submission.
Starts on: Assessment Period Schedule
Records dated assessment checks and attaches supporting material for the Control Owner's review.
Starts on: Assessment Test Evidence
Start free, then use Proto to change fields, steps and approvals before your team goes live.