Hub-Level Permissions

This article provides a summary of each access permission available within Hub environments in 6clicks

Permission	Description
Admin	Group for all Administration permissions. Does not grant any permissions by itself.
Administration	Allows access to the administration module.
Custom Data - All (ensure Custom Data - Tag Management permission is ON)	Allows access to configure all custom fields and options. Must have the below permission activated to work.
Custom Data - Tag Management	Allows access to the Custom Data area to configure custom fields and options. By default this setting only provides access to Tag Management and Control Set Types. Use the above setting to provide access to all custom data fields.
Groups	View only access to Groups and Group Members in the administration module.
Create, edit and delete Groups	Allows the user to create, edit and delete Groups within the administration module.
Manage Group Members	Allows the user to add and remove users to existing Groups as Group Members. This will give them access to any records assigned to that Group.
Roles	View only access to Roles in the administration module.
Create new role	Allows the user to create and define new roles.
Delete role	Allows the user to delete existing roles. Deleting roles that are being used will trigger a confirmation warning.
Edit role	Allows the user to re-define existing roles.
Settings	Allows access to configure settings within the administration. Excludes the ability to customise and brand 6clicks - this requires the below permission.
Custom Branding	Allows access to define custom branding (including colours and logos for 6clicks).
Single Sign-on	Allows access to the Single Sign-On area to set up and manage SSO with an external identity provider.
Spoke Group Management	Group for all Spoke Group permissions. Does not grant any permissions by itself.
Create, edit and delete spoke groups	Allows users to create, edit and delete spoke groups.
View spoke groups	Allows users to vies spoke groups and the spokes within them.
Subscription	Allows access to the Subscription area to start and manage the current subscription to 6clicks.
Users	View only access to Users in the administration module.
Change permissions	Allows access to amend permissions for specific users. This will overwrite role permissions that are granted by assigned roles.
Create new user	Allows the user to create and define new users.
Delete user	Allows the user to delete existing users.
Edit user	Allows the user to re-define existing users.
Login as a user	Allows the user to impersonate other users and log into their account.
Content Library	Group for all Content Library permissions. Does not grant any permissions by itself.
Access content library	Allows access to the Content Library to view available content. For Spokes within Hub & Spoke, this will only provide access to the exclusive Content Library administered in the Hub.
Buy content library item	Allows user the ability to purchase and download content from the Content Library. For Hubs within Hub & Spoke, this includes the ability to manage the exclusive Content Library for Spokes.
General	Group for all General permissions. Does not grant any permissions by itself.
Access inbound assessments	Allows users to access Question Based Assessments that have been sent to them. By default, users will only have access to questions assigned to them.
View all questions	Allows users view-only access to questions not assigned to them.
Add New Client	Allows users to create new Spokes.
Add New Client Template	Allows users to create new Spoke Templates.
Add Respondent	Allows users to add Respondents to Third-Parties.
Analytics	Allows access to the Analytics module. This needs to be paired with child permissions to grant access to reports.
Administration	Allows access to standard and custom reports within the Administration report folders.
Assets	Allows access to standard and custom reports within the Assets report folders.
Audits & Assessments	Allows access to standard and custom reports within the Audits & Assessment report folders.
Authorities	Allows access to standard and custom reports within the Authorities report folders.
Control Sets	Allows access to standard and custom reports within the Control Sets report folders.
Issues	Allows access to standard and custom reports within the Issues report folders.
Registers	Allows access to standard and custom reports within the Registers report folders.
Risk Reviews	Allows access to standard and custom reports within the Risk Reviews report folders.
Risks	Allows access to standard and custom reports within the Risks report folders.
Third-Parties	Allows access to standard and custom reports within the Third-Parties report folders.
Assessment	Allows access to view Question Based Assessments Templates that are assigned to the user within the Audits & Assessments module.
Add control assessment	Deprecated.
Add domain assessment	Allows users to add Domains to Question Based Assessments Templates.
Add question assessment	Allows users to add Questions to Question Based Assessments Templates.
Approve assessment	Allows the user to approve Question Based Assessments Templates.
Create assessment	Allows the user to create new Question Based Assessments Templates.
Delete control assessment	Deprecated.
Delete domain assessment	Allows users to delete Domains from Question Based Assessments Templates.
Delete question assessment	Allows users to delete Questions from Question Based Assessments Templates.
Edit Assessment	Allows the user edit access to all Question Based Assessments Templates they have view access to. If paired with 'View All Assessments' permission, user will have view and edit access to all Audits & Assessments.
Edit domain assessment	Allows users to edit existing Domains in Question Based Assessments Templates.
Edit question assessment	Allows users to edit existing Questions in Question Based Assessments Templates.
Export assessment	Allows the user to export existing Question Based Assessments Templates.
Import assessment	Allows the user to import data into existing Question Based Assessments Templates.
Publish assessment	Allows the user to publish Question Based Assessments Templates.
Save as assessment	Allows the user to take a copy of an existing Question Based Assessments Templates.
View all Assessment	Allows the user view access to all Question Based Assessments Templates.
Assessment access members	Allows users to view access members linked to both Question and Requirement Based Assessments Templates.
Manage access members for assessment	Allows users to add and remove Access Members to both Question and Requirement Based Assessments Templates.
Add Authority	Allows users to add new Authority Documents to the Compliance module. Must be paired with 'Edit Authority Document' to enable editing of new records.
Delete Reference	Allows users to delete Authority Documents that have been archived.
Edit Reference	Allows users to edit existing Authority Documents. Includes ability to archive and restore Authority Documents.
Authority mapping powered by Hailey	Allows users to map Authority Documents to one another using the Hailey AI engine.
Client Administration	Allows users to edit existing Spokes.
Control set mapping powered by Hailey	Allows users to map Control Sets to one another or to Authority Documents using the Hailey AI engine.
Create tags in modules	Allows users to add new tags direct to Content Templates
Create, edit and delete risk libraries	Allows users to create, edit and delete Risk Libraries.
Create, edit, delete Abstract Issue Actions	Allows users to define abstract Issue Actions against Issues within Issue Libraries. Requires access to both the Issue & Incident module and the Issue Libraries within it.
Dashboard	Allows users to access the 6clicks homepage dashboard.
Manage risk workflow configuration	Allows users to change Hub risk workflow configuration. Requires Administration access.
Manual Authority Mapping	Allows users to manually map Authority Documents to one another.
Notifications	Allows users to receive in-app Notifications. Includes a Notification alert icon and a Notification home page.
Projects & Playbooks	Full access to the Projects & Playbooks Templates.
Publish Authority mappings to Content Library	Allows users to publish mapped Authorities to the Exclusive Content Library. The Exclusive Content Library must be activated for your Hub.
Regulation & Compliance	Allows users to access the Control Templates. Includes view access to all Control Sets.
Create {0}	Allows users to create Control Set Templates and underlying Controls. Includes all types of Control Sets.
Delete control set	Allows users to delete Control Set Templates and underlying Controls. Includes all types of Control Sets.
Edit control set	Allows users to edit Control Set Templates and underlying Controls. Includes all types of Control Sets.
Reports	Allows users access to the Reports module. Does not grant access to reports within the Report module as this is handled by permissions to each module.
Requirement based assessment	Allows access to view all Requirement Based Assessments Templates.
Create assessment	Allows users to create Requirement Based Assessments Templates.
Edit Assessment	Allows users to edit Requirement Based Assessments Templates.
Export assessment	Allows users to export data from existing Requirement Based Assessments Templates.
Import assessment	Allows users to import data into existing Requirement Based Assessments Templates.
Publish assessment	Allows users to publish Requirement Based Assessments Templates.
Save as assessment	Allows users to copy existing Requirement Based Assessments Templates to create a new one.
Responsibility	Allows users to view Control Responsibilities within Control Set Templates. Requires access to the Control Templates.
Create, edit, delete Responsibilities	Allows users to create, edit and delete Responsibilities within the Control Set Templates. Requires access to the Controls Templates.
Risk Reviews	Deprecated.
Create, edit, delete Risks Libraries in Web App	Deprecated.
Create, edit, delete Risk Reviews in Web App	Deprecated.
View Risk Library in Web App	Deprecated.
View Risk Reviews in Web App	Deprecated.
Service / Product	Deprecated.
Create Service / Product	Deprecated.
Delete Service / Product	Deprecated.
Edit Service / Product	Deprecated.
Third-Party	Allows users to access Spokes. Includes view access to all Spokes.
Create third-party	Allows users to create new Spokes.
Delete third-party	Allows users to archive existing Spokes.
Edit third-party	Allows users to edit existing Spokes.
Import third-party	Allows users to bulk import new Spokes.
ThirdPartyOnboardingForm	Allows users to access the Spoke Onboarding link.
Trust portal terms and conditions for Hubs	Group for all Trust portal terms and conditions permissions. Does not grant any permissions by itself.
Create terms and conditions	Allows users to create new terms and conditions.
Edit terms and conditions	Allows users to edit existing terms and conditions.
View terms and conditions	Allows users to view all existing terms and conditions.
View Actions	Deprecated.
Change Action statuses	Depreacted.
View Issue Library	Allows users to access the Libraries area of the Issues and Incidents module and view all Issue Libraries. Requires access to the Issues & Incidents module.
Create, edit, delete Issue Libraries	Allows users to create, edit and delete Issue Libraries and Issues within them.
Hailey AI	Central permission for users to access Hailey AI features.