Risk workflow: stage access

Learn more about the stage access functionality as part of risk workflow stage management

This article discusses the stage access functionality in detail, which is part of risk workflow.

For risk workflow step-by-step instructions, head here.

To learn about managing risk workflow stages from the Hub, head here.

 

Stage access provides extra controls and guardrails as you move a risk through its lifecycle. Using stage access, you can stop users from performing certain actions to a risk when it is at certain stages.

Stage access management

While creating a new workflow stage or editing an existing workflow stage, head to the Stage access tab.

Here, you can enable/disable fields and actions. You can enable/disable each field by using the toggles to the right, or entire sections by using the section toggles.

The fields and actions that you can enable/disable for the risk for this stage are as below.

  • Risk Details - the ability to make changes to these fields
  • Risk Assessment
    • Create - the ability to create any risk assessments for a risk at this stage
    • Edit - the ability to edit any existing risk assessments linked to a risk at this stage
    • Delete - the ability to delete any risk assessments linked to a risk at this stage
  • Treatment
    • Treatment Status
    • Treatment Decision
  • Linked Data Attachments and Comments - the ability to link/unlink data with a risk at this stage
    • Assets
    • Custom Registers
    • Third-Parties
    • Issues & Incidents
    • Attachments
    • Comments - the ability to add a comment to the risk at this stage

The section toggle on the right turns off all the fields; you can also individually select fields in the section.

If at least one field toggle is off within a section, then the section toggle is off so that you can easily identify a section that does not have full access even when the section is collapsed.

After all changes have been made, hit Save. Changes are saved for all 3 tabs, i.e. Stage definition, Stage access, & Stage requirements, so you can navigate between these tabs without worrying about losing your work.

Stage access in action

For example, we disable section Linked Data Attachments and Comments for 'Stage 2'.

No users can then edit the data linked to a risk in Stage 2 regardless of any edit permissions granted. The for existing linked data types and the Add Linked data button are greyed out. You can see tooltips for fields and actions that are disabled due to stage access if you hover over the more information icon.

You can also check exactly what access this stage allows by clicking on View stage details.

Risk Reviewers are exempt from stage access restrictions.