UpRaise roles and permissions

UpRaise roles and permissions


Introduction

A role is a collection of permissions defined for the whole system that you can assign to specific user/s in specific context/s. The combination of roles and context defines specific user's ability to take actions on something.

UpRaise roles & permissions can be managed by UpRaise admins by default. Navigate to ‘Company directory >> Roles & permissions tab’.

Roles & permissions tab contains the list of all permissions that can be given to different users based on their role in UpRaise. Read Basic company directory attributes | Role for more details.

Click on each section to define your roles & permissions set up for each module of UpRaise.

Columns are defined based on UpRaise roles. Admin, Super admin & No access roles are set by default whereas for User with Company OKR permissions & User role, permissions can be modified by admins or users with sufficient permissions.

UpRaise roles

Currently, there are 4 types of roles in UpRaise.

Super admin

This user will have 'god-like' view to the entire data in the app. They can manage all administrative features and make any changes in the UpRaise setup. They have complete visibility of the data within the app regardless of it is shared with them or not.

Admin

This is the secondary level administrative role. Users with this role can manage all administrative features. However, in terms of data visibility, they can view/edit all the data they have created and that is explicitly shared with them. For example, admins can view company OKRs, team OKRs that are created by themselves or are explicitly shared with them. Same is the case for form templates & distributions.

User

Users with this role are non-administrative users. By default, these users would have access to non-admin features of UpRaise. They can view data that is created by themselves & that is shared explicitly with them. However, these users can be given admin/super admin like permissions from Roles & permissions tab of Company directory.

Users with Company OKR permissions

This user role is specially created for managing company OKRs. This user has similar permissions that are given to user role. Along with that, they have default permission of managing UpRaise company OKRs. these users can also be given admin/super admin like permissions from Roles & permissions tab of Company directory.

Editing permissions for each UpRaise role

Roles & permission page contains a section-wise list of actions for each of UpRaise features. One can manage permissions for these actions by clicking on edit/pencil icon. Note that, on mouseover, one can edit permissions only for 'Users & Users with company OKRs permissions'.

What permissions can be managed from Roles & permissions page?

  • Direct manager - Manager assigned to a user within company directory.

    • Example - is B’s manager.

  • Indirect manager - Manager of user’s manager.

    • Example - C is A’s manager, C is B’s indirect manager.

  • Team lead - User selected as team lead.

    • Example - X is team 1’s team lead.

  • Indirect team lead - Team lead of the parent team.

    • Example -Team 2 is Team 1’s parent team. Y is team 2’s team lead. So Y is an indirect team lead.

 

Permissions

Possible value

Description

Permissions

Possible value

Description

OKR settings/administration

  • Yes

  • If yes, user with given role can manage OKR settings.

  • No

  • If no, user with given role cannot manage OKR settings

Create comment

  • Yes

  • If yes, user with given role can create comments within OKRs

  • No

  • If yes, user with given role cannot create comments within OKRs

Edit comment

  • Yes

    • Always

    • When creator

  • Yes -

    • If always, user with given role can edit comments within OKRs always regardless of who has created comments.

    • If when creator, user with given roles can edit comments only that are created by thmeselves as logged in user.

  • No

  • If No, user with given role cannot edit any comments within OKRs.

Delete comment

  • Yes

    • Always

    • When creator

  • Yes -

    • If always, user with given role can delete comments within OKRs always regardless of who has created comments.

    • If when creator, user with given roles can delete comments only that are created by themselves as logged in user.

  • No

  • If No, user with given role cannot delete any comments within OKRs.

Create attachment

  • Yes

  • If yes, user with given role can attach files within OKRs.

  • No

  • If yes, user with given role cannot attach files within OKRs.

Delete attachment

  • Yes

    • When Creator

    • Always

  • Yes-

    • If When creator, user with given role can delete attached within own OKRs.

    • If always, user with given role can delete all attached files within all OKRs.

  • No

  • If yes, user with given role cannot delete attached files within OKRs.

Manage key result reminders

  • Yes

    • Always

    • When owner of key result

  • Yes -

    • If always, user with given role can manage KR reminders for all users regardless of who owns the KR.

    • If when owner of key result, user with given roles can manage KR reminders only for own KRs.

  • No

  • If No, user with given role cannot manage any KR reminders.

Objective edit grades

  • Yes

    • Always

    • When creator

  • Yes -

    • If always, user with given role can edit all OKR grades regardless of who has added it.

    • If when creator, user with given role can edit grades only if they have added it.

  • No

  • If No, user with given role cannot edit any grades.

Permissions

Possible value

Description

Permissions

Possible value

Description

Create company objective

  • Yes

  • If yes, user with given role can create company objectives.

  • No

  • If no, user with given role cannot create company objectives.

View company objective

  • Yes

    • Always

    • When creator

    • When owner

    • When shared

  • Yes -

    • If always, user with given role can always view all company objectives no matter who creats/owns them.

    • If when creator, user with given role can view company objectives they have created.

    • If when owner, user with given roles can view company objectives they own.

    • If when shared, user with given role can view company objectives that are shared by other users.

  • No

  • If no, user with given role cannot view company objectives.

Edit company objective

  • Yes

    • Always

    • When creator

    • When owner

  • Yes -

    • If always, user with given role can edit all company objectives regardless of who created/owns them.

    • If when creator, user with given role can edit company objectives they have created.

    • If when owner, user with given role can edit company objectives they own.

  • No

  • If no, user with given role cannot edit any company objectives.

Delete company objective

  • Yes

    • Always

    • When creator

    • When owner

  • Yes -

    • If always, user with given role can delete all company objectives regardless of who has created/owns them.

    • If when creator, user with given role can delete company objectives they have created.

    • If when owner, user with given role can delete company objectives they own.

  • No

  • If no, user with given role cannot delete any company objectives .

Punch-in company objective

  • Yes

    • Always

    • When creator

    • When owner

  • Yes -

    • If always, user with given role can punch-in on all company objectives regardless of who has created/owns them.

    • If when creator, user with given role can punch -in on company objectives they have created.

    • If when owner, user with given role can puch-in company objectives they own.

  • No

  • If no, user with given role cannot punch-in on any company objectives.

Reopen company objective

  • Yes

    • Always

    • When creator

    • When owner

  • Yes -

    • If always, user with given role can reopen all closed company objectives regardless of who has created/owns them.

    • If when creator, user with given role can reopen closed company objectives they have created.

    • If when owner, user with given role can reopen closed company objectives they own.

  • No

  • If no, user with given role cannot reopen any closed company objectives.

Add company objective grades

  • Yes

    • Always

    • When creator

    • When owner

  • Yes -

    • If always, user with given role can add grades for closed company objectives regardless of who has created/owns them.

    • If when creator, user with given role can add grades for closed company objectives they have created.

    • If when owner, user with given role can add grades for closed company objectives they own.

  • No

  • If no, user with given role cannot add grades for any closed objectives at company level.

Abandon/close without grading/close & carry forward company objective

  • Yes

    • Always

    • When creator

    • When owner

Yes -

  • If always, user with given role can Abandon/close without grading/close & carry forward all company level objectives regardless of who has created/owns them.

  • If when creator, user with given role can Abandon/close without grading/close & carry forward all company level objectives they have created.

  • If when owner, user with given role can Abandon/close without grading/close & carry forward all company level objectives they own.

  • No

  • If no, user with given role cannot Abandon/close without grading/close & carry forward any

Create company key result

  • Yes

    • Always

    • When creator of parent objective

    • When owner of parent objective

Yes -

  • If always, user with given role can create KRs for all company objectives regardless of who has created an objective/who owns it.

  • If when creator of parent objective, user with given role can create KRs for company objectives they have created.

  • If when owner of parent objective, user with given role can create KRs for company objectives they own.

  • No

  • If no, user with given role cannot create KRs for any company objective.

Edit company key result

  • Yes

    • Always

    • When creator

    • When owner

    • When creator of parent objective

    • When owner of parent objective

Yes -

  • If always, user with given role can edit all KRs from all company objectives regardless of who has created/owns objective

  • If when creator, user with given role can edit KRs they have created within company objective/s.

  • If when owner, user with given role can edit KRs they own in company objective/s.

  • If when creator of parent objective, user with given role can edit KRs for parent company objectives they have created.

  • If when owner of parent objective, user with given role can edit KRs for parent company objectives they own.

  • No

  • If no, user with given role cannot edit KRs for any company objective.

Delete company key result

  • Yes

    • Always

    • When creator

    • When owner

    • When creator of parent objective

    • When owner of parent objective

Yes -

  • If always, user with given role can delete all KRs from all company objectives regardless of who has created/owns objective

  • If when creator, user with given role can delete KRs they have created within company objective/s.

  • If when owner, user with given role can delete KRs they own company objective/s.

  • If when creator of parent objective, user with given role can delete KRs from parent company objectives they have created.

  • If when owner of parent objective, user with given role can delete KRs from parent company objectives they own.

  • No

  • If no, user with given role cannot delete KRs from any company objective.

Punch-in company key result

  • Yes

    • Always

    • When creator

    • When owner

    • When creator of parent objective

    • When owner of parent objective

Yes -

  • If always, user with given role can punch-in all KRs from all company objectives regardless of who has created/owns objectives.

  • If when creator, user with given role can punch-in KRs they have created within company objective/s.

  • If when owner, user with given role can punch-in KRs they own within company objective/s.

  • If when creator of parent objective, user with given role can punch-in KRs from parent company objectives they have created.

  • If when owner of parent objective, user with given role can punch-in KRs from parent company objectives they own.

  • No

  • If no, user with given role cannot punch-in KRs from any company objective.

Add/Delete company key result action

  • Yes

    • Always

    • When creator of key result

    • When owner of key result

    • When creator of parent objective

    • When owner of parent objective

Yes -

  • If always, user with given role can add/delete KR actions to all KRs from all company objectives regardless of who has created/owns objective

  • If when creator, user with given role can add/delete KR actions of KRs they have created within company objectives/s.

  • If when owner, user with given role can add/delete KR actions of KRs they own within company objectives/s.

  • If when creator of parent objective, user with given role can add/delete KR actions to KRs from parent company objectives they have created.

  • If when owner of parent objective, user with given role can add/delete KR actions to KRs from parent company objectives they own.

 

  • If no, user with given role cannot add/delete KR actions to KRs from any company objective.

Permissions

Possible value

Description

Permissions

Possible value

Description

Create team

  • Yes

    • Always

    • When team lead

    • When team member

    • When indirect team lead

  • Yes -

    • If always, user with given role can create team objectives for any team within UpRaise.

    • If when team member, user with given role can create team objectives only for his team only if he is a team lead.

    • If when team member, user with given role can create team objectives as team member for team/s they belong to

    • If when indirect team lead, user with given role can create team objective for child team/s as indirect team lead (team lead of parent team)

  • No

  • If no, user with given role cannot create team objective for any team in UpRaise

View team objective

  • Yes

    • Always

    • When creator

    • When owner

    • When team lead

    • When team member

    • When indirect team lead

    • When shared

  • Yes -

    • If always, user with given role can view any team objective.

    • If when creator, user with given role can view team objectives they have created.

    • If when owner, user with given role can view team objectives they own

    • If when team lead, user with given role can view team objectives of team/s they are team lead of

    • If when team member, user with given role can view team objectives of team/s they belong to

    • If when indirect team lead, user with given role can view team objectives of team/s they are indirect team leads of(indirect team lead is a team lead of your parent team)

 

  • No

  • If no, user with given role cannot view any team objective

Edit team objective

  • Yes

    • Always

    • When creator

    • When owner

    • When team lead

    • When team member

    • When indirect team lead

  • Yes -

    • If always, user with given role can edit all team objectives.

    • If when creator, user with given role can edit team objectives that they have created

    • If when owner, user with given role can edit team objectives they own

    • If when team lead, user with given role can edit team objectives of team/s they are team lead of

    • If when team member, user with given role can edit team objectives of team/s they belong to

    • If when indirect team lead, user with given role can edit team objectives of team/s they are indirect team leads of (indirect team is a team lead of your parent team)

  • No

  • If no, user with given role cannot edit any team objectives

Delete team objective

  • Yes

    • Always

    • When creator

    • When owner

    • When team lead

    • When team member

    • When indirect team lead

  • Yes -

    • If always, user with given role can delete all team objectives.

    • If when creator, user with given role can delete team objectives that they have created

    • If when owner, user with given role can delete team objectives they own

    • If when team lead, user with given role can delete team objectives of team/s they are team lead of

    • If when team member, user with given role can delete team objectives of team/s they belong to

    • If when indirect team lead, user with given role can delete team objectives of team/s they are indirect team leads of (indirect team is a team lead of your parent team)

  • No

  • If no, user with given role cannot delete any team objectives

Punch-in team objective

  • Yes

    • Always

    • When creator

    • When owner

    • When team lead

    • When team member

    • When indirect team lead

  • Yes -

    • If always, user with given role can punch-in all team objectives.

    • If when creator, user with given role can punch-in team objectives that they have created

    • If when owner, user with given role can punch-in team objectives they own

    • If when team lead, user with given role can punch-in team objectives of team/s they are team lead of

    • If when team member, user with given role can punch-in team objectives of team/s they belong to

    • If when indirect team lead, user with given role can punch-in team objectives of team/s they are indirect team leads of (indirect team is a team lead of your parent team)

  • No

  • If no, user with given role cannot punch-in any team objectives

Reopen team objective

  • Yes

    • Always

    • When creator

    • When owner

    • When team lead

    • When team member

    • When indirect team lead