Responsibility profiles
What each employee monitors, maintains, decides, acts on and escalates, with the roles and record scope that give them access. Administrators set roles and scope; managers assign responsibilities.
Two separate settings. Permission says what a role may do in a module, and on which records. Default relevance says which pages are put on a person’s workspace and menu. A page can be permitted without being on the default workspace. The reverse cannot happen:
Employees
An employee, a system user and an instructor profile are three linked records. One person can hold several roles; one employee has no login at all. See Users.
Restricted information: how one record reaches each role
details · search · export · notification · AI answerAll five outputs are built from the same list of fields the role may see, so a restricted value cannot appear in one of them and not the others. The restriction is demonstrated with static rules; production authorization is not implemented in the prototype.
Sensitive fields
Field-level rules| Field group | Where it lives | Roles that see the value | Everyone else |
|---|
The same rule applies to record details, search results, exports, notifications and AI answers.