1.1. Basic Functionalities of the Roles page

---

SurgeONE.ai Roles module has the following basic functionalities:

1. View pre-defined system Roles
2. Create custom Role
3. View existing system and custom Roles
4. Rename a custom Role name and modify its description
5. Delete an existing Custom Role
6. Clone an existing Role from a system or custom Role
7. Assign or remove users from system and custom Roles
8. Assign / edit / revoke permissions / access to a custom Role

1.2. System Defined Roles

---

In SurgeONE.ai, when a company or a sub-company is created, a set of default system Roles gets automatically created for that company for each of the modules existing in SurgeONE.ai. All those default Roles are listed below, grouped by modules:

1. Company
   • Company / Branch Admin
2. Audit Module
   • Audit Super Admin
   • Audit Admin
   • Audit Access
3. Attestation Module
   • Attestation Admin
   • Attestation Access
4. Code of Ethics Module
   • Code of Ethics Admin
   • Code of Ethics Access
5. Vendor Management Module
   • Vendor Admin
6. Cyber Compliance Module
   • Cyber Admin
   • Registered Representative
     

     - (The Registered Representative role user can do all operations related to Cyber Dashboard in terms of viewing as well as widget and dashboard configurations and can do partial operations in Audit, Attestation and Code of Ethics modules)

   • Incident Manager
   • Incident Resolution Team
7. Marketing Review
   • Marketing Review Super Admin
   • Marketing Review Content Approver
   • Marketing Review Content Provider
8. E-Comms Surveillance
   • E-Comms Surveillance Super Admin
   • E-Comms Surveillance Admin
   • E-Comms Surveillance Access

2.3. Roles Grid View

---

About the Roles grid view:

• The grid view of the Roles page displays the system defined roles by default, as well as any custom roles, if created.
• The number of row entries of various roles which populate the grid view depending on the pagination options set by the logged-in user.
• Ten entries are display per page view by default.

The layout comprises of the following columns:

1. ROLE NAME - This column displays the role label. If you create custom roles then those role labels are also displayed here. The listed items change according to search operations executed and filter set.
2. DESCRIPTION - This column displays the role description. Role descriptions are displayed here if they were provided at the time of the role creation. The listed items change according to search operations executed and the role type dropdown filter set.
3. SYSTEM - This column displays the role type. There can be two types. The system defined roles are displayed with a Yes label under this column, while any created custom roles are displayed with a No label.
4. ACTION - This column contains a vertical ellipsis icon for each row entry. This icon can be toggled to reveal the row-context menu options. More information on these menu options have been provided in the following sub-sections.

Fig: 37 - Roles grid view

2.4. Understanding the ACTION Menu Options

---

There are five menu options as follows:

1. Edit - Use it to modify any custom role. System roles cannot be edited. This option is greyed-out for system roles.
2. Delete - Use it to delete any custom role. System roles cannot be deleted. This option is greyed-out for system roles.
3. View - Use it to view any custom role.
4. Assign User(s) - Use it to assign user(s) to or remove assigned user(s) from any system or custom role.
5. Clone - Use it to make a copy of any system or custom role configuration.

Here is the view of the menu options for a system defined role.

Fig: 38 - Expanded view of the system role menu options of the ACTION column

Here is the view of the menu options for a custom role.

Fig: 39 - Expanded view of the custom role menu options of the ACTION column

2.4.1. Editing Roles

---

Editing System Roles

Click on the vertical ellipsis icon of the ACTION column against a system defined role row entry to load the menu options. The Edit option is disabled. Hence, you cannot edit a system defined role.

Fig: 40 - Disabled Edit menu option

Editing Custom Roles

1. Click on the vertical ellipsis icon of the ACTION column against a custom role row entry to load the menu options. Click on the Edit option to get navigated to the Role > Edit Role view.

Fig: 41 - Enabled Edit menu option

2. You can change the role label, the description (if present), and the assigned permissions. You can also assign users or remove any previously assigned ones.

Fig: 42 - Edit Role view

The Company tab is selected by default. When you expand the Can Access Settings category from within the Company tab, then the following permissions are revealed:

• Can Access Roles
• Can Access Mail Templates
• Can Access Manage Objects

When you expand the Can Access Roles sub-category of the Can Access Settings category from within the Company tab, then the following permissions are revealed:

• Can View Roles
• Can Add / Edit / Clone / Delete Roles

When you expand the Can Access Mail Templates sub-category of the Can Access Settings category from within the Company tab, then the following permissions are revealed:

• Can View Mail Templates
• Can Edit Mail Templates

When you expand the Can Access Manage Objects sub-category of the Can Access Settings category from within the Company tab, then the following permissions are revealed:

• Can View Manage Objects
• Can Add / Edit / Delete Manage Objects
3. Next, click on the System Objects tab. The Audit tab is displayed after you click on it.

When you expand the View Accesses category of the Audit tab, then the following permissions are revealed:

• Can View All Audits
• Can View Audits assign to me
• Can Download an Audit Report
• Can View Past / Completed Audit Reports

When you expand the Add / Edit Accesses category of the Audit tab, then the following permissions are revealed:

• Can Add / Edit an Audit
• Can Attest an Audit
• Can Remediate an Audit
• Can Resolve Red Flagged Questions
• Can Add / Edit Questionnaire Template

When you expand the Delete Accesses category of the Audit tab, then the following permission is revealed:

• Can Delete a (Not Started) Audit

When you expand the View Accesses category of the Attestation tab, then the following permissions are revealed:

• Can View All Attestations
• Can View Attestations assign to me
• Can View Past Attestation Reports (All)
• Can View Past Attestation Reports (Self)

When you expand the Add / Edit Accesses category of the Attestation tab, then the following permissions are revealed:

• Can Add / Edit an Attestation
• Can Attest an Attestation
• Can Remediate an Attestation
• Can Resolve Red Flagged Questions
• Can Add / Edit Questionnaire Template
• Can Send Reminder

When you expand the Delete Accesses category of the Attestation tab, then the following permission is revealed:

• Can Delete a (Not Started) Attestation

When you expand the View Accesses category of the Code of Ethics tab, then the following permissions are revealed:

• Can View All Requests
• Can View Requests Submitted by Me or my subordinates
• Can View Rules
• Can View all Completed Requests
• Can View Completed Code of Ethics Requests submitted by me and my subordinates

When you expand the Add / Edit Accesses category of the Code of Ethics tab, then the following permissions are revealed:

• Can Add Requests
• Can Approve or Reject all Requests
• Can Approve / Reject Requests Submitted by my subordinates
• Can Add / Edit Rules

When you expand the View Accesses category of the Vendor Management tab, then the following permissions are revealed:

• Can View All VDD
• Can View My VDD
• Can Download a VDD Report
• Can View Past / Completed Vendor Assessment Reports

When you expand the Add / Edit Accesses category of the Vendor Management tab, then the following permissions are revealed:

• Can Add / Edit a Vendor
• Can Add / Edit an Assessment for all Vendors
• Can Conduct All Assessments
• Can Remediate Assessments
• Can Resolve Red Flagged Questions
• Can Add / Edit Questionnaire Template

When you navigate to the Cyber tab, then the following permission category is revealed:

• Can do all operations related to Cyber Dashboard in terms of viewing as well as widget and dashboard configurations

When you expand the Can do all operations related to Cyber Dashboard in terms of viewing as well as widget and dashboard configurations category of the Cyber tab, then the following granular permissions are revealed:

• Can do all operations related to Incident
• Can resolve Incident

When you navigate to the Marketing_Review tab, then the following permission category is revealed:

• Can do all operations in the Marketing Review module

When you expand the Can do all operations in the Marketing Review module category of the Marketing_Review tab, then the following granular permissions are revealed:

• Can View Marketing Review
• Can View Marketing Review Assign to me
• Add / Edit Marketing Review
• Delete Marketing Review
• Upload Marketing Review
• Approve Marketing Review

When you navigate to the E_Comms tab, then the following permission category is revealed:

• Can do all operations in the E-Comms Surveillance module

When you expand the Can do all operations in the E-Comms Surveillance module category of the E_Comms tab, then the following granular permissions are revealed:

• Can View E-Comms Surveillance
• Can View E-Comms Surveillance Assign to me
• Add / Edit E-Comms Surveillance
• Delete E-Comms Surveillance
4. You can make applicable changes to the above-mentioned slider states.
5. Click on the Assign User button to proceed to make modifications to the user(s) list who are included and belonging to this custom role.
6. Click on the Submit button to confirm your changes. You will get redirected to the Roles page.

2.4.2. Deleting Roles

---

Deleting System Roles

Click on the vertical ellipsis icon of the ACTION column against a system defined role row entry to load the menu options. The Delete option is disabled. Hence, you cannot delete a system defined role.

Fig: 43 - Disabled Delete menu option

Deleting Custom Roles

1. Click on the vertical ellipsis icon of the ACTION column against a custom role row entry to load the menu options. Click on the Delete option to remove the custom role.

Fig: 44 - Enabled Delete menu option

2. A modal window gets prompted to obtain your confirmation. Click on the Yes button to proceed to delete the custom role. The custom role gets removed from the grid view and is deleted from the application only if the assigned user(s) of this role are assigned to another role.

Fig: 45 - Confirmation modal prompt to remove custom role

2.4.3. Viewing Roles

---

The following system defined roles are displayed by default:

1. Company / Branch Admin
2. Audit Super Admin
3. Audit Admin
4. Audit Access
5. Attestation Admin
6. Attestation Access
7. Code of Ethics Admin
8. Code of Ethics Access
9. Vendor Admin
10. Cyber Admin
11. Registered Representative
12. Incident Manager
13. Incident Resolution Team
14. Marketing Review Super Admin
15. Marketing Review Content Approver
16. Marketing Review Content Provider
17. E-Comms Surveillance Super Admin
18. E-Comms Surveillance Admin
19. E-Comms Surveillance Access

Each of the roles are described in the following sub-sections.

2.4.3.1. Understanding the Company / Branch Admin Role

---

Navigating to the Company / Branch Admin Role

Click on the vertical ellipsis icon of the ACTION column against the Company / Branch Admin row to load the menu options. Click on the View option to get navigated to the role assignment view.

Tab Elements

The Role Name field displays the role label. Below it, the Description field is displayed. It is blank for all system defined roles.

Below it, there are permissions related to the SurgeONE.ai modules in the eight primary tabs labeled as follows:

1. The Company main tab
2. The Audit sub-tab under the System Objects main tab
3. The Attestation sub-tab under the System Objects main tab
4. The Code of Ethics sub-tab under the System Objects main tab
5. The Vendor Management sub-tab under the System Objects main tab
6. The Cyber sub-tab under the System Objects main tab
7. The Marketing Review sub-tab under the System Objects main tab
8. The E-Comms sub-tab under the System Objects main tab

You can view the assigned permission related to the role in the applicable tab(s). Different roles have permissions enabled in different permission categories and these permissions can be in different tab(s).

Tab Functionality

• The Company main tab is displayed by default.
• You can click on any module-wise tab under the System Objects main tab to view its modular permissions. Usually permission(s) are granted in the related modules which are associated with the role.
• Indented permissions which are granted will have their corresponding slider automatically enabled and will remain in collapsed view by default. One can expand to see the granular accesses.
• From within most of the tabs you can expand the permission category (for example: View, Edit, Delete) to reveal its associated permissions. Click on the right arrow to do so. It will change to a down arrow. The same is applicable for its sub-categories.
• All view related accesses are under the View Accesses group
• All add and edit related accesses are under the Add / Edit Accesses group
• All delete related accesses are under the Delete Accesses group
• If you expand each of these groups then further underlying accesses specific to that group will be displayed. If the slider is enabled against each of these groups, then all underlying accesses are checked or granted by default. If the slider against the group is disabled you can move down to the next level to grant or check selected accesses specific to this group.
• Sliders are present to signify whether the permission category, sub-category and individual permissions are enabled (purple color when ON), partially enabled (sky blue color when a child-level permission is OFF) or disabled (grey when OFF).
• You cannot change the slider states for any of the system defined roles.

Table of Company / Branch Admin Role Permissions

The table which elaborates the permissions granted to the Company / Branch Admin Role in the various tabs and its outcomes, is provided in the Annexure section #3.1.

2.4.3.2. Understanding the Audit Super Admin Role

---

Navigating to the Audit Super Admin Role

Click on the vertical ellipsis icon of the ACTION column against the Audit Super Admin row to load the menu options. Click on the View option to get navigated to the role assignment view.

Tab Elements

The Role Name field displays the role label. Below it, the Description field is displayed. It is blank for all system defined roles.

Below it, there are permissions related to the SurgeONE.ai modules in the eight primary tabs labeled as follows:

1. The Company main tab
2. The Audit sub-tab under the System Objects main tab
3. The Attestation sub-tab under the System Objects main tab
4. The Code of Ethics sub-tab under the System Objects main tab
5. The Vendor Management sub-tab under the System Objects main tab
6. The Cyber sub-tab under the System Objects main tab
7. The Marketing Review sub-tab under the System Objects main tab
8. The E-Comms sub-tab under the System Objects main tab

You can view the assigned permission related to the role in the applicable tab(s). Different roles have permissions enabled in different permission categories and these permissions can be in different tab(s).

Tab Functionality

• The Company main tab is displayed by default.
• You can click on any module-wise tab under the System Objects main tab to view its modular permissions. Usually permission(s) are granted in the related modules which are associated with the role.
• Indented permissions which are granted will have their corresponding slider automatically enabled and will remain in collapsed view by default. One can expand to see the granular accesses.
• From within most of the tabs you can expand the permission category (for example: View, Edit, Delete) to reveal its associated permissions. Click on the right arrow to do so. It will change to a down arrow. The same is applicable for its sub-categories.
• All view related accesses are under the View Accesses group
• All add and edit related accesses are under the Add / Edit Accesses group
• All delete related accesses are under the Delete Accesses group
• If you expand each of these groups then further underlying accesses specific to that group will be displayed. If the slider is enabled against each of these groups, then all underlying accesses are checked or granted by default. If the slider against the group is disabled you can move down to the next level to grant or check selected accesses specific to this group.
• Sliders are present to signify whether the permission category, sub-category and individual permissions are enabled (purple color when ON), partially enabled (sky blue color when a child-level permission is OFF) or disabled (grey when OFF).
• You cannot change the slider states for any of the system defined roles.

Table of Audit Super Admin Role Permissions

The table which elaborates the permissions granted to the Audit Super Admin Role in the relevant tab and its outcomes, is provided in the Annexure section #3.2.

2.4.3.3. Understanding the Audit Admin Role

---

Navigating to the Audit Admin Role

Click on the vertical ellipsis icon of the ACTION column against the Audit Admin row to load the menu options. Click on the View option to get navigated to the role assignment view.

Tab Elements

The Role Name field displays the role label. Below it, the Description field is displayed. It is blank for all system defined roles.

Below it, there are permissions related to the SurgeONE.ai modules in the eight primary tabs labeled as follows:

1. The Company main tab
2. The Audit sub-tab under the System Objects main tab
3. The Attestation sub-tab under the System Objects main tab
4. The Code of Ethics sub-tab under the System Objects main tab
5. The Vendor Management sub-tab under the System Objects main tab
6. The Cyber sub-tab under the System Objects main tab
7. The Marketing Review sub-tab under the System Objects main tab
8. The E-Comms sub-tab under the System Objects main tab

You can view the assigned permission related to the role in the applicable tab(s). Different roles have permissions enabled in different permission categories and these permissions can be in different tab(s).

Tab Functionality

• The Company main tab is displayed by default.
• You can click on any module-wise tab under the System Objects main tab to view its modular permissions. Usually permission(s) are granted in the related modules which are associated with the role.
• Indented permissions which are granted will have their corresponding slider automatically enabled and will remain in collapsed view by default. One can expand to see the granular accesses.
• From within most of the tabs you can expand the permission category (for example: View, Edit, Delete) to reveal its associated permissions. Click on the right arrow to do so. It will change to a down arrow. The same is applicable for its sub-categories.
• All view related accesses are under the View Accesses group
• All add and edit related accesses are under the Add / Edit Accesses group
• All delete related accesses are under the Delete Accesses group
• If you expand each of these groups then further underlying accesses specific to that group will be displayed. If the slider is enabled against each of these groups, then all underlying accesses are checked or granted by default. If the slider against the group is disabled you can move down to the next level to grant or check selected accesses specific to this group.
• Sliders are present to signify whether the permission category, sub-category and individual permissions are enabled (purple color when ON), partially enabled (sky blue color when a child-level permission is OFF) or disabled (grey when OFF).
• You cannot change the slider states for any of the system defined roles.

Table of Audit Admin Role Permissions

The table which elaborates the permissions granted to the Audit Admin Role in the relevant tab and its outcomes, is provided in the Annexure section #3.3.

2.4.3.4. Understanding the Audit Access Role

---

Navigating to the Audit Access Role

Click on the vertical ellipsis icon of the ACTION column against the Audit Access row to load the menu options. Click on the View option to get navigated to the role assignment view.

Tab Elements

The Role Name field displays the role label. Below it, the Description field is displayed. It is blank for all system defined roles.

Below it, there are permissions related to the SurgeONE.ai modules in the eight primary tabs labeled as follows:

1. The Company main tab
2. The Audit sub-tab under the System Objects main tab
3. The Attestation sub-tab under the System Objects main tab
4. The Code of Ethics sub-tab under the System Objects main tab
5. The Vendor Management sub-tab under the System Objects main tab
6. The Cyber sub-tab under the System Objects main tab
7. The Marketing Review sub-tab under the System Objects main tab
8. The E-Comms sub-tab under the System Objects main tab

You can view the assigned permission related to the role in the applicable tab(s). Different roles have permissions enabled in different permission categories and these permissions can be in different tab(s).

Tab Functionality

• The Company main tab is displayed by default.
• You can click on any module-wise tab under the System Objects main tab to view its modular permissions. Usually permission(s) are granted in the related modules which are associated with the role.
• Indented permissions which are granted will have their corresponding slider automatically enabled and will remain in collapsed view by default. One can expand to see the granular accesses.
• From within most of the tabs you can expand the permission category (for example: View, Edit, Delete) to reveal its associated permissions. Click on the right arrow to do so. It will change to a down arrow. The same is applicable for its sub-categories.
• All view related accesses are under the View Accesses group
• All add and edit related accesses are under the Add / Edit Accesses group
• All delete related accesses are under the Delete Accesses group
• If you expand each of these groups then further underlying accesses specific to that group will be displayed. If the slider is enabled against each of these groups, then all underlying accesses are checked or granted by default. If the slider against the group is disabled you can move down to the next level to grant or check selected accesses specific to this group.
• Sliders are present to signify whether the permission category, sub-category and individual permissions are enabled (purple color when ON), partially enabled (sky blue color when a child-level permission is OFF) or disabled (grey when OFF).
• You cannot change the slider states for any of the system defined roles.

Table of Audit Access Role Permissions

The table which elaborates the permissions granted to the Audit Access Role in the relevant tab and its outcomes, is provided in the Annexure section #3.4.

2.4.3.5. Understanding the Attestation Admin Role

---

Navigating to the Attestation Admin Role

Click on the vertical ellipsis icon of the ACTION column against the Attestation Admin row to load the menu options. Click on the View option to get navigated to the role assignment view.

Tab Elements

The Role Name field displays the role label. Below it, the Description field is displayed. It is blank for all system defined roles.

Below it, there are permissions related to the SurgeONE.ai modules in the eight primary tabs labeled as follows:

1. The Company main tab
2. The Audit sub-tab under the System Objects main tab
3. The Attestation sub-tab under the System Objects main tab
4. The Code of Ethics sub-tab under the System Objects main tab
5. The Vendor Management sub-tab under the System Objects main tab
6. The Cyber sub-tab under the System Objects main tab
7. The Marketing Review sub-tab under the System Objects main tab
8. The E-Comms sub-tab under the System Objects main tab

You can view the assigned permission related to the role in the applicable tab(s). Different roles have permissions enabled in different permission categories and these permissions can be in different tab(s).

Tab Functionality

• The Company main tab is displayed by default.
• You can click on any module-wise tab under the System Objects main tab to view its modular permissions. Usually permission(s) are granted in the related modules which are associated with the role.
• Indented permissions which are granted will have their corresponding slider automatically enabled and will remain in collapsed view by default. One can expand to see the granular accesses.
• From within most of the tabs you can expand the permission category (for example: View, Edit, Delete) to reveal its associated permissions. Click on the right arrow to do so. It will change to a down arrow. The same is applicable for its sub-categories.
• All view related accesses are under the View Accesses group
• All add and edit related accesses are under the Add / Edit Accesses group
• All delete related accesses are under the Delete Accesses group
• If you expand each of these groups then further underlying accesses specific to that group will be displayed. If the slider is enabled against each of these groups, then all underlying accesses are checked or granted by default. If the slider against the group is disabled you can move down to the next level to grant or check selected accesses specific to this group.
• Sliders are present to signify whether the permission category, sub-category and individual permissions are enabled (purple color when ON), partially enabled (sky blue color when a child-level permission is OFF) or disabled (grey when OFF).
• You cannot change the slider states for any of the system defined roles.

Table of Attestation Admin Role Permissions

The table which elaborates the permissions granted to the Attestation Admin Role in the relevant tab and its outcomes, is provided in the Annexure section #3.5.

2.4.3.6. Understanding the Attestation Access Role

---

Navigating to the Attestation Access Role

Click on the vertical ellipsis icon of the ACTION column against the Attestation Access row to load the menu options. Click on the View option to get navigated to the role assignment view.

Tab Elements

The Role Name field displays the role label. Below it, the Description field is displayed. It is blank for all system defined roles.

Below it, there are permissions related to the SurgeONE.ai modules in the eight primary tabs labeled as follows:

1. The Company main tab
2. The Audit sub-tab under the System Objects main tab
3. The Attestation sub-tab under the System Objects main tab
4. The Code of Ethics sub-tab under the System Objects main tab
5. The Vendor Management sub-tab under the System Objects main tab
6. The Cyber sub-tab under the System Objects main tab
7. The Marketing Review sub-tab under the System Objects main tab
8. The E-Comms sub-tab under the System Objects main tab

You can view the assigned permission related to the role in the applicable tab(s). Different roles have permissions enabled in different permission categories and these permissions can be in different tab(s).

Tab Functionality

• The Company main tab is displayed by default.
• You can click on any module-wise tab under the System Objects main tab to view its modular permissions. Usually permission(s) are granted in the related modules which are associated with the role.
• Indented permissions which are granted will have their corresponding slider automatically enabled and will remain in collapsed view by default. One can expand to see the granular accesses.
• From within most of the tabs you can expand the permission category (for example: View, Edit, Delete) to reveal its associated permissions. Click on the right arrow to do so. It will change to a down arrow. The same is applicable for its sub-categories.
• All view related accesses are under the View Accesses group
• All add and edit related accesses are under the Add / Edit Accesses group
• All delete related accesses are under the Delete Accesses group
• If you expand each of these groups then further underlying accesses specific to that group will be displayed. If the slider is enabled against each of these groups, then all underlying accesses are checked or granted by default. If the slider against the group is disabled you can move down to the next level to grant or check selected accesses specific to this group.
• Sliders are present to signify whether the permission category, sub-category and individual permissions are enabled (purple color when ON), partially enabled (sky blue color when a child-level permission is OFF) or disabled (grey when OFF).
• You cannot change the slider states for any of the system defined roles.

Table of Attestation Access Role Permissions

The table which elaborates the permissions granted to the Attestation Access Role in the relevant tab and its outcomes, is provided in the Annexure section #3.6.

2.4.3.7. Understanding the Code of Ethics Admin Role

---

Navigating to the Code of Ethics Admin Role

Click on the vertical ellipsis icon of the ACTION column against the Code of Ethics Admin row to load the menu options. Click on the View option to get navigated to the role assignment view.

Tab Elements

The Role Name field displays the role label. Below it, the Description field is displayed. It is blank for all system defined roles.

Below it, there are permissions related to the SurgeONE.ai modules in the eight primary tabs labeled as follows:

1. The Company main tab
2. The Audit sub-tab under the System Objects main tab
3. The Attestation sub-tab under the System Objects main tab
4. The Code of Ethics sub-tab under the System Objects main tab
5. The Vendor Management sub-tab under the System Objects main tab
6. The Cyber sub-tab under the System Objects main tab
7. The Marketing Review sub-tab under the System Objects main tab
8. The E-Comms sub-tab under the System Objects main tab

You can view the assigned permission related to the role in the applicable tab(s). Different roles have permissions enabled in different permission categories and these permissions can be in different tab(s).

Tab Functionality

• The Company main tab is displayed by default.
• You can click on any module-wise tab under the System Objects main tab to view its modular permissions. Usually permission(s) are granted in the related modules which are associated with the role.
• Indented permissions which are granted will have their corresponding slider automatically enabled and will remain in collapsed view by default. One can expand to see the granular accesses.
• From within most of the tabs you can expand the permission category (for example: View, Edit, Delete) to reveal its associated permissions. Click on the right arrow to do so. It will change to a down arrow. The same is applicable for its sub-categories.
• All view related accesses are under the View Accesses group
• All add and edit related accesses are under the Add / Edit Accesses group
• All delete related accesses are under the Delete Accesses group
• If you expand each of these groups then further underlying accesses specific to that group will be displayed. If the slider is enabled against each of these groups, then all underlying accesses are checked or granted by default. If the slider against the group is disabled you can move down to the next level to grant or check selected accesses specific to this group.
• Sliders are present to signify whether the permission category, sub-category and individual permissions are enabled (purple color when ON), partially enabled (sky blue color when a child-level permission is OFF) or disabled (grey when OFF).
• You cannot change the slider states for any of the system defined roles.

Table of Code of Ethics Admin Role Permissions

The table which elaborates the permissions granted to the Code of Ethics Admin Role in the relevant tab and its outcomes, is provided in the Annexure section #3.7.

2.4.3.8. Understanding the Code of Ethics Access Role

---

Navigating to the Code of Ethics Access Role

Click on the vertical ellipsis icon of the ACTION column against the Code of Ethics Access row to load the menu options. Click on the View option to get navigated to the role assignment view.

Tab Elements

The Role Name field displays the role label. Below it, the Description field is displayed. It is blank for all system defined roles.

Below it, there are permissions related to the SurgeONE.ai modules in the eight primary tabs labeled as follows:

1. The Company main tab
2. The Audit sub-tab under the System Objects main tab
3. The Attestation sub-tab under the System Objects main tab
4. The Code of Ethics sub-tab under the System Objects main tab
5. The Vendor Management sub-tab under the System Objects main tab
6. The Cyber sub-tab under the System Objects main tab
7. The Marketing Review sub-tab under the System Objects main tab
8. The E-Comms sub-tab under the System Objects main tab

You can view the assigned permission related to the role in the applicable tab(s). Different roles have permissions enabled in different permission categories and these permissions can be in different tab(s).

Tab Functionality

• The Company main tab is displayed by default.
• You can click on any module-wise tab under the System Objects main tab to view its modular permissions. Usually permission(s) are granted in the related modules which are associated with the role.
• Indented permissions which are granted will have their corresponding slider automatically enabled and will remain in collapsed view by default. One can expand to see the granular accesses.
• From within most of the tabs you can expand the permission category (for example: View, Edit, Delete) to reveal its associated permissions. Click on the right arrow to do so. It will change to a down arrow. The same is applicable for its sub-categories.
• All view related accesses are under the View Accesses group
• All add and edit related accesses are under the Add / Edit Accesses group
• All delete related accesses are under the Delete Accesses group
• If you expand each of these groups then further underlying accesses specific to that group will be displayed. If the slider is enabled against each of these groups, then all underlying accesses are checked or granted by default. If the slider against the group is disabled you can move down to the next level to grant or check selected accesses specific to this group.
• Sliders are present to signify whether the permission category, sub-category and individual permissions are enabled (purple color when ON), partially enabled (sky blue color when a child-level permission is OFF) or disabled (grey when OFF).
• You cannot change the slider states for any of the system defined roles.

Table of Code of Ethics Access Role Permissions

The table which elaborates the permissions granted to the Code of Ethics Access Role in the relevant tab and its outcomes, is provided in the Annexure section #3.8.

2.4.3.9. Understanding the Vendor Admin Role

---

Navigating to the Vendor Admin Role

Click on the vertical ellipsis icon of the ACTION column against the Vendor Admin row to load the menu options. Click on the View option to get navigated to the role assignment view.

Tab Elements

The Role Name field displays the role label. Below it, the Description field is displayed. It is blank for all system defined roles.

Below it, there are permissions related to the SurgeONE.ai modules in the eight primary tabs labeled as follows:

1. The Company main tab
2. The Audit sub-tab under the System Objects main tab
3. The Attestation sub-tab under the System Objects main tab
4. The Code of Ethics sub-tab under the System Objects main tab
5. The Vendor Management sub-tab under the System Objects main tab
6. The Cyber sub-tab under the System Objects main tab
7. The Marketing Review sub-tab under the System Objects main tab
8. The E-Comms sub-tab under the System Objects main tab

You can view the assigned permission related to the role in the applicable tab(s). Different roles have permissions enabled in different permission categories and these permissions can be in different tab(s).

Tab Functionality

• The Company main tab is displayed by default.
• You can click on any module-wise tab under the System Objects main tab to view its modular permissions. Usually permission(s) are granted in the related modules which are associated with the role.
• Indented permissions which are granted will have their corresponding slider automatically enabled and will remain in collapsed view by default. One can expand to see the granular accesses.
• From within most of the tabs you can expand the permission category (for example: View, Edit, Delete) to reveal its associated permissions. Click on the right arrow to do so. It will change to a down arrow. The same is applicable for its sub-categories.
• All view related accesses are under the View Accesses group
• All add and edit related accesses are under the Add / Edit Accesses group
• All delete related accesses are under the Delete Accesses group
• If you expand each of these groups then further underlying accesses specific to that group will be displayed. If the slider is enabled against each of these groups, then all underlying accesses are checked or granted by default. If the slider against the group is disabled you can move down to the next level to grant or check selected accesses specific to this group.
• Sliders are present to signify whether the permission category, sub-category and individual permissions are enabled (purple color when ON), partially enabled (sky blue color when a child-level permission is OFF) or disabled (grey when OFF).
• You cannot change the slider states for any of the system defined roles.

Table of Vendor Admin Role Permissions

The table which elaborates the permissions granted to the Vendor Admin Role in the relevant tab and its outcomes, is provided in the Annexure section #3.9.

2.4.3.10. Understanding the Cyber Admin Role

---

Navigating to the Cyber Admin Role

Click on the vertical ellipsis icon of the ACTION column against the Cyber Admin row to load the menu options. Click on the View option to get navigated to the role assignment view.

Tab Elements

The Role Name field displays the role label. Below it, the Description field is displayed. It is blank for all system defined roles.

Below it, there are permissions related to the SurgeONE.ai modules in the eight primary tabs labeled as follows:

1. The Company main tab
2. The Audit sub-tab under the System Objects main tab
3. The Attestation sub-tab under the System Objects main tab
4. The Code of Ethics sub-tab under the System Objects main tab
5. The Vendor Management sub-tab under the System Objects main tab
6. The Cyber sub-tab under the System Objects main tab
7. The Marketing Review sub-tab under the System Objects main tab
8. The E-Comms sub-tab under the System Objects main tab

You can view the assigned permission related to the role in the applicable tab(s). Different roles have permissions enabled in different permission categories and these permissions can be in different tab(s).

Tab Functionality

• The Company main tab is displayed by default.
• You can click on any module-wise tab under the System Objects main tab to view its modular permissions. Usually permission(s) are granted in the related modules which are associated with the role.
• Indented permissions which are granted will have their corresponding slider automatically enabled and will remain in collapsed view by default. One can expand to see the granular accesses.
• From within most of the tabs you can expand the permission category (for example: View, Edit, Delete) to reveal its associated permissions. Click on the right arrow to do so. It will change to a down arrow. The same is applicable for its sub-categories.
• All view related accesses are under the View Accesses group
• All add and edit related accesses are under the Add / Edit Accesses group
• All delete related accesses are under the Delete Accesses group
• If you expand each of these groups then further underlying accesses specific to that group will be displayed. If the slider is enabled against each of these groups, then all underlying accesses are checked or granted by default. If the slider against the group is disabled you can move down to the next level to grant or check selected accesses specific to this group.
• Sliders are present to signify whether the permission category, sub-category and individual permissions are enabled (purple color when ON), partially enabled (sky blue color when a child-level permission is OFF) or disabled (grey when OFF).
• You cannot change the slider states for any of the system defined roles.

Table of Cyber Admin Role Permissions

The table which elaborates the permissions granted to the Cyber Admin Role in the relevant tab and its outcomes, is provided in the Annexure section #3.10.

2.4.3.11. Understanding the Registered Representative Role

---

Navigating to the Registered Representative Role

Click on the vertical ellipsis icon of the ACTION column against the Registered Representative row to load the menu options. Click on the View option to get navigated to the role assignment view.

Tab Elements

The Role Name field displays the role label. Below it, the Description field is displayed. It is blank for all system defined roles.

Below it, there are permissions related to the SurgeONE.ai modules in the eight primary tabs labeled as follows:

1. The Company main tab
2. The Audit sub-tab under the System Objects main tab
3. The Attestation sub-tab under the System Objects main tab
4. The Code of Ethics sub-tab under the System Objects main tab
5. The Vendor Management sub-tab under the System Objects main tab
6. The Cyber sub-tab under the System Objects main tab
7. The Marketing Review sub-tab under the System Objects main tab
8. The E-Comms sub-tab under the System Objects main tab

You can view the assigned permission related to the role in the applicable tab(s). Different roles have permissions enabled in different permission categories and these permissions can be in different tab(s).

Tab Functionality

• The Company main tab is displayed by default.
• You can click on any module-wise tab under the System Objects main tab to view its modular permissions. Usually permission(s) are granted in the related modules which are associated with the role.
• Indented permissions which are granted will have their corresponding slider automatically enabled and will remain in collapsed view by default. One can expand to see the granular accesses.
• From within most of the tabs you can expand the permission category (for example: View, Edit, Delete) to reveal its associated permissions. Click on the right arrow to do so. It will change to a down arrow. The same is applicable for its sub-categories.
• All view related accesses are under the View Accesses group
• All add and edit related accesses are under the Add / Edit Accesses group
• All delete related accesses are under the Delete Accesses group
• If you expand each of these groups then further underlying accesses specific to that group will be displayed. If the slider is enabled against each of these groups, then all underlying accesses are checked or granted by default. If the slider against the group is disabled you can move down to the next level to grant or check selected accesses specific to this group.
• Sliders are present to signify whether the permission category, sub-category and individual permissions are enabled (purple color when ON), partially enabled (sky blue color when a child-level permission is OFF) or disabled (grey when OFF).
• You cannot change the slider states for any of the system defined roles.

Table of Registered Representative Role Permissions

The table which elaborates the permissions granted to the Registered Representative Role in the relevant tabs and its outcomes, is provided in the Annexure section #3.11.

2.4.3.12. Understanding the Incident Manager Role

---

Navigating to the Incident Manager Role

Click on the vertical ellipsis icon of the ACTION column against the Incident Manager row to load the menu options. Click on the View option to get navigated to the role assignment view.

Tab Elements

The Role Name field displays the role label. Below it, the Description field is displayed. It is blank for all system defined roles.

Below it, there are permissions related to the SurgeONE.ai modules in the eight primary tabs labeled as follows:

1. The Company main tab
2. The Audit sub-tab under the System Objects main tab
3. The Attestation sub-tab under the System Objects main tab
4. The Code of Ethics sub-tab under the System Objects main tab
5. The Vendor Management sub-tab under the System Objects main tab
6. The Cyber sub-tab under the System Objects main tab
7. The Marketing Review sub-tab under the System Objects main tab
8. The E-Comms sub-tab under the System Objects main tab

You can view the assigned permission related to the role in the applicable tab(s). Different roles have permissions enabled in different permission categories and these permissions can be in different tab(s).

Tab Functionality

• The Company main tab is displayed by default.
• You can click on any module-wise tab under the System Objects main tab to view its modular permissions. Usually permission(s) are granted in the related modules which are associated with the role.
• Indented permissions which are granted will have their corresponding slider automatically enabled and will remain in collapsed view by default. One can expand to see the granular accesses.
• From within most of the tabs you can expand the permission category (for example: View, Edit, Delete) to reveal its associated permissions. Click on the right arrow to do so. It will change to a down arrow. The same is applicable for its sub-categories.
• All view related accesses are under the View Accesses group
• All add and edit related accesses are under the Add / Edit Accesses group
• All delete related accesses are under the Delete Accesses group
• If you expand each of these groups then further underlying accesses specific to that group will be displayed. If the slider is enabled against each of these groups, then all underlying accesses are checked or granted by default. If the slider against the group is disabled you can move down to the next level to grant or check selected accesses specific to this group.
• Sliders are present to signify whether the permission category, sub-category and individual permissions are enabled (purple color when ON), partially enabled (sky blue color when a child-level permission is OFF) or disabled (grey when OFF).
• You cannot change the slider states for any of the system defined roles.

Table of Incident Manager Role Permissions

The table which elaborates the permissions granted to the Incident Manager Role in the relevant tab and its outcomes, is provided in the Annexure section #3.12.

2.4.3.13. Understanding the Incident Resolution Team Role

---

Navigating to the Incident Resolution Team Role

Click on the vertical ellipsis icon of the ACTION column against the Incident Resolution Team row to load the menu options. Click on the View option to get navigated to the role assignment view.

Tab Elements

The Role Name field displays the role label. Below it, the Description field is displayed. It is blank for all system defined roles.

Below it, there are permissions related to the SurgeONE.ai modules in the eight primary tabs labeled as follows:

1. The Company main tab
2. The Audit sub-tab under the System Objects main tab
3. The Attestation sub-tab under the System Objects main tab
4. The Code of Ethics sub-tab under the System Objects main tab
5. The Vendor Management sub-tab under the System Objects main tab
6. The Cyber sub-tab under the System Objects main tab
7. The Marketing Review sub-tab under the System Objects main tab
8. The E-Comms sub-tab under the System Objects main tab

You can view the assigned permission related to the role in the applicable tab(s). Different roles have permissions enabled in different permission categories and these permissions can be in different tab(s).

Tab Functionality

• The Company main tab is displayed by default.
• You can click on any module-wise tab under the System Objects main tab to view its modular permissions. Usually permission(s) are granted in the related modules which are associated with the role.
• Indented permissions which are granted will have their corresponding slider automatically enabled and will remain in collapsed view by default. One can expand to see the granular accesses.
• From within most of the tabs you can expand the permission category (for example: View, Edit, Delete) to reveal its associated permissions. Click on the right arrow to do so. It will change to a down arrow. The same is applicable for its sub-categories.
• All view related accesses are under the View Accesses group
• All add and edit related accesses are under the Add / Edit Accesses group
• All delete related accesses are under the Delete Accesses group
• If you expand each of these groups then further underlying accesses specific to that group will be displayed. If the slider is enabled against each of these groups, then all underlying accesses are checked or granted by default. If the slider against the group is disabled you can move down to the next level to grant or check selected accesses specific to this group.
• Sliders are present to signify whether the permission category, sub-category and individual permissions are enabled (purple color when ON), partially enabled (sky blue color when a child-level permission is OFF) or disabled (grey when OFF).
• You cannot change the slider states for any of the system defined roles.

Table of Incident Resolution Team Role Permissions

The table which elaborates the permissions granted to the Incident Resolution Team Role in the relevant tab and its outcomes, is provided in the Annexure section #3.13.

2.4.3.14. Understanding the Marketing Review Super Admin Role

---

Navigating to the Marketing Review Super Admin Role

Click on the vertical ellipsis icon of the ACTION column against the Marketing Review Super Admin row to load the menu options. Click on the View option to get navigated to the role assignment view.

Tab Elements

The Role Name field displays the role label. Below it, the Description field is displayed. It is blank for all system defined roles.

Below it, there are permissions related to the SurgeONE.ai modules in the eight primary tabs labeled as follows:

1. The Company main tab
2. The Audit sub-tab under the System Objects main tab
3. The Attestation sub-tab under the System Objects main tab
4. The Code of Ethics sub-tab under the System Objects main tab
5. The Vendor Management sub-tab under the System Objects main tab
6. The Cyber sub-tab under the System Objects main tab
7. The Marketing Review sub-tab under the System Objects main tab
8. The E-Comms sub-tab under the System Objects main tab

You can view the assigned permission related to the role in the applicable tab(s). Different roles have permissions enabled in different permission categories and these permissions can be in different tab(s).

Tab Functionality

• The Company main tab is displayed by default.
• You can click on any module-wise tab under the System Objects main tab to view its modular permissions. Usually permission(s) are granted in the related modules which are associated with the role.
• Indented permissions which are granted will have their corresponding slider automatically enabled and will remain in collapsed view by default. One can expand to see the granular accesses.
• From within most of the tabs you can expand the permission category (for example: View, Edit, Delete) to reveal its associated permissions. Click on the right arrow to do so. It will change to a down arrow. The same is applicable for its sub-categories.
• All view related accesses are under the View Accesses group
• All add and edit related accesses are under the Add / Edit Accesses group
• All delete related accesses are under the Delete Accesses group
• If you expand each of these groups then further underlying accesses specific to that group will be displayed. If the slider is enabled against each of these groups, then all underlying accesses are checked or granted by default. If the slider against the group is disabled you can move down to the next level to grant or check selected accesses specific to this group.
• Sliders are present to signify whether the permission category, sub-category and individual permissions are enabled (purple color when ON), partially enabled (sky blue color when a child-level permission is OFF) or disabled (grey when OFF).
• You cannot change the slider states for any of the system defined roles.

Table of Marketing Review Super Admin Role Permissions

The table which elaborates the permissions granted to the Marketing Review Super Admin Role in the relevant tab and its outcomes, is provided in the Annexure section #3.14.

2.4.3.15. Understanding the Marketing Review Content Approver Role

---

Navigating to the Marketing Review Content Approver Role

Click on the vertical ellipsis icon of the ACTION column against the Marketing Review Content Approver row to load the menu options. Click on the View option to get navigated to the role assignment view.

Tab Elements

The Role Name field displays the role label. Below it, the Description field is displayed. It is blank for all system defined roles.

Below it, there are permissions related to the SurgeONE.ai modules in the eight primary tabs labeled as follows:

1. The Company main tab
2. The Audit sub-tab under the System Objects main tab
3. The Attestation sub-tab under the System Objects main tab
4. The Code of Ethics sub-tab under the System Objects main tab
5. The Vendor Management sub-tab under the System Objects main tab
6. The Cyber sub-tab under the System Objects main tab
7. The Marketing Review sub-tab under the System Objects main tab
8. The E-Comms sub-tab under the System Objects main tab

You can view the assigned permission related to the role in the applicable tab(s). Different roles have permissions enabled in different permission categories and these permissions can be in different tab(s).

Tab Functionality

• The Company main tab is displayed by default.
• You can click on any module-wise tab under the System Objects main tab to view its modular permissions. Usually permission(s) are granted in the related modules which are associated with the role.
• Indented permissions which are granted will have their corresponding slider automatically enabled and will remain in collapsed view by default. One can expand to see the granular accesses.
• From within most of the tabs you can expand the permission category (for example: View, Edit, Delete) to reveal its associated permissions. Click on the right arrow to do so. It will change to a down arrow. The same is applicable for its sub-categories.
• All view related accesses are under the View Accesses group
• All add and edit related accesses are under the Add / Edit Accesses group
• All delete related accesses are under the Delete Accesses group
• If you expand each of these groups then further underlying accesses specific to that group will be displayed. If the slider is enabled against each of these groups, then all underlying accesses are checked or granted by default. If the slider against the group is disabled you can move down to the next level to grant or check selected accesses specific to this group.
• Sliders are present to signify whether the permission category, sub-category and individual permissions are enabled (purple color when ON), partially enabled (sky blue color when a child-level permission is OFF) or disabled (grey when OFF).
• You cannot change the slider states for any of the system defined roles.

Table of Marketing Review Content Approver Role Permissions

The table which elaborates the permissions granted to the Marketing Review Content Approver Role in the relevant tab and its outcomes, is provided in the Annexure section #3.15.

2.4.3.16. Understanding the Marketing Review Content Provider Role

---

Navigating to the Marketing Review Content Provider Role

Click on the vertical ellipsis icon of the ACTION column against the Marketing Review Content Provider row to load the menu options. Click on the View option to get navigated to the role assignment view.

Tab Elements

The Role Name field displays the role label. Below it, the Description field is displayed. It is blank for all system defined roles.

Below it, there are permissions related to the SurgeONE.ai modules in the eight primary tabs labeled as follows:

1. The Company main tab
2. The Audit sub-tab under the System Objects main tab
3. The Attestation sub-tab under the System Objects main tab
4. The Code of Ethics sub-tab under the System Objects main tab
5. The Vendor Management sub-tab under the System Objects main tab
6. The Cyber sub-tab under the System Objects main tab
7. The Marketing Review sub-tab under the System Objects main tab
8. The E-Comms sub-tab under the System Objects main tab

You can view the assigned permission related to the role in the applicable tab(s). Different roles have permissions enabled in different permission categories and these permissions can be in different tab(s).

Tab Functionality

• The Company main tab is displayed by default.
• You can click on any module-wise tab under the System Objects main tab to view its modular permissions. Usually permission(s) are granted in the related modules which are associated with the role.
• Indented permissions which are granted will have their corresponding slider automatically enabled and will remain in collapsed view by default. One can expand to see the granular accesses.
• From within most of the tabs you can expand the permission category (for example: View, Edit, Delete) to reveal its associated permissions. Click on the right arrow to do so. It will change to a down arrow. The same is applicable for its sub-categories.
• All view related accesses are under the View Accesses group
• All add and edit related accesses are under the Add / Edit Accesses group
• All delete related accesses are under the Delete Accesses group
• If you expand each of these groups then further underlying accesses specific to that group will be displayed. If the slider is enabled against each of these groups, then all underlying accesses are checked or granted by default. If the slider against the group is disabled you can move down to the next level to grant or check selected accesses specific to this group.
• Sliders are present to signify whether the permission category, sub-category and individual permissions are enabled (purple color when ON), partially enabled (sky blue color when a child-level permission is OFF) or disabled (grey when OFF).
• You cannot change the slider states for any of the system defined roles.

Table of Marketing Review Content Provider Role Permissions

The table which elaborates the permissions granted to the Marketing Review Content Provider Role in the relevant tab and its outcomes, is provided in the Annexure section #3.16.

2.4.3.17. Understanding the E-Comms Surveillance Super Admin Role

---

Navigating to the E-Comms Surveillance Super Admin Role

Click on the vertical ellipsis icon of the ACTION column against the E-Comms Surveillance Super Admin row to load the menu options. Click on the View option to get navigated to the role assignment view.

Tab Elements

The Role Name field displays the role label. Below it, the Description field is displayed. It is blank for all system defined roles.

Below it, there are permissions related to the SurgeONE.ai modules in the eight primary tabs labeled as follows:

1. The Company main tab
2. The Audit sub-tab under the System Objects main tab
3. The Attestation sub-tab under the System Objects main tab
4. The Code of Ethics sub-tab under the System Objects main tab
5. The Vendor Management sub-tab under the System Objects main tab
6. The Cyber sub-tab under the System Objects main tab
7. The Marketing Review sub-tab under the System Objects main tab
8. The E-Comms sub-tab under the System Objects main tab

You can view the assigned permission related to the role in the applicable tab(s). Different roles have permissions enabled in different permission categories and these permissions can be in different tab(s).

Tab Functionality

• The Company main tab is displayed by default.
• You can click on any module-wise tab under the System Objects main tab to view its modular permissions. Usually permission(s) are granted in the related modules which are associated with the role.
• Indented permissions which are granted will have their corresponding slider automatically enabled and will remain in collapsed view by default. One can expand to see the granular accesses.
• From within most of the tabs you can expand the permission category (for example: View, Edit, Delete) to reveal its associated permissions. Click on the right arrow to do so. It will change to a down arrow. The same is applicable for its sub-categories.
• All view related accesses are under the View Accesses group
• All add and edit related accesses are under the Add / Edit Accesses group
• All delete related accesses are under the Delete Accesses group
• If you expand each of these groups then further underlying accesses specific to that group will be displayed. If the slider is enabled against each of these groups, then all underlying accesses are checked or granted by default. If the slider against the group is disabled you can move down to the next level to grant or check selected accesses specific to this group.
• Sliders are present to signify whether the permission category, sub-category and individual permissions are enabled (purple color when ON), partially enabled (sky blue color when a child-level permission is OFF) or disabled (grey when OFF).
• You cannot change the slider states for any of the system defined roles.

Table of E-Comms Surveillance Super Admin Role Permissions

The table which elaborates the permissions granted to the E-Comms Surveillance Super Admin Role in the relevant tab and its outcomes, is provided in the Annexure section #3.17.

2.4.3.18. Understanding the E-Comms Surveillance Admin Role

---

Navigating to the E-Comms Surveillance Admin Role

Click on the vertical ellipsis icon of the ACTION column against the E-Comms Surveillance Admin row to load the menu options. Click on the View option to get navigated to the role assignment view.

Tab Elements

The Role Name field displays the role label. Below it, the Description field is displayed. It is blank for all system defined roles.

Below it, there are permissions related to the SurgeONE.ai modules in the eight primary tabs labeled as follows:

1. The Company main tab
2. The Audit sub-tab under the System Objects main tab
3. The Attestation sub-tab under the System Objects main tab
4. The Code of Ethics sub-tab under the System Objects main tab
5. The Vendor Management sub-tab under the System Objects main tab
6. The Cyber sub-tab under the System Objects main tab
7. The Marketing Review sub-tab under the System Objects main tab
8. The E-Comms sub-tab under the System Objects main tab

You can view the assigned permission related to the role in the applicable tab(s). Different roles have permissions enabled in different permission categories and these permissions can be in different tab(s).

Tab Functionality

• The Company main tab is displayed by default.
• You can click on any module-wise tab under the System Objects main tab to view its modular permissions. Usually permission(s) are granted in the related modules which are associated with the role.
• Indented permissions which are granted will have their corresponding slider automatically enabled and will remain in collapsed view by default. One can expand to see the granular accesses.
• From within most of the tabs you can expand the permission category (for example: View, Edit, Delete) to reveal its associated permissions. Click on the right arrow to do so. It will change to a down arrow. The same is applicable for its sub-categories.
• All view related accesses are under the View Accesses group
• All add and edit related accesses are under the Add / Edit Accesses group
• All delete related accesses are under the Delete Accesses group
• If you expand each of these groups then further underlying accesses specific to that group will be displayed. If the slider is enabled against each of these groups, then all underlying accesses are checked or granted by default. If the slider against the group is disabled you can move down to the next level to grant or check selected accesses specific to this group.
• Sliders are present to signify whether the permission category, sub-category and individual permissions are enabled (purple color when ON), partially enabled (sky blue color when a child-level permission is OFF) or disabled (grey when OFF).
• You cannot change the slider states for any of the system defined roles.

Table of E-Comms Surveillance Admin Role Permissions

The table which elaborates the permissions granted to the E-Comms Surveillance Admin Role in the relevant tab and its outcomes, is provided in the Annexure section #3.18.

2.4.3.19. Understanding the E-Comms Surveillance Access Role

---

Navigating to the E-Comms Surveillance Access Role

Click on the vertical ellipsis icon of the ACTION column against the E-Comms Surveillance Access row to load the menu options. Click on the View option to get navigated to the role assignment view.

Tab Elements

The Role Name field displays the role label. Below it, the Description field is displayed. It is blank for all system defined roles.

Below it, there are permissions related to the SurgeONE.ai modules in the eight primary tabs labeled as follows:

1. The Company main tab
2. The Audit sub-tab under the System Objects main tab
3. The Attestation sub-tab under the System Objects main tab
4. The Code of Ethics sub-tab under the System Objects main tab
5. The Vendor Management sub-tab under the System Objects main tab
6. The Cyber sub-tab under the System Objects main tab
7. The Marketing Review sub-tab under the System Objects main tab
8. The E-Comms sub-tab under the System Objects main tab

You can view the assigned permission related to the role in the applicable tab(s). Different roles have permissions enabled in different permission categories and these permissions can be in different tab(s).

Tab Functionality

• The Company main tab is displayed by default.
• You can click on any module-wise tab under the System Objects main tab to view its modular permissions. Usually permission(s) are granted in the related modules which are associated with the role.
• Indented permissions which are granted will have their corresponding slider automatically enabled and will remain in collapsed view by default. One can expand to see the granular accesses.
• From within most of the tabs you can expand the permission category (for example: View, Edit, Delete) to reveal its associated permissions. Click on the right arrow to do so. It will change to a down arrow. The same is applicable for its sub-categories.
• All view related accesses are under the View Accesses group
• All add and edit related accesses are under the Add / Edit Accesses group
• All delete related accesses are under the Delete Accesses group
• If you expand each of these groups then further underlying accesses specific to that group will be displayed. If the slider is enabled against each of these groups, then all underlying accesses are checked or granted by default. If the slider against the group is disabled you can move down to the next level to grant or check selected accesses specific to this group.
• Sliders are present to signify whether the permission category, sub-category and individual permissions are enabled (purple color when ON), partially enabled (sky blue color when a child-level permission is OFF) or disabled (grey when OFF).
• You cannot change the slider states for any of the system defined roles.

Table of E-Comms Surveillance Access Role Permissions

The table which elaborates the permissions granted to the E-Comms Surveillance Access Role in the relevant tab and its outcomes, is provided in the Annexure section #3.19.

2.4.4. Assigning User(s) to a Role

---

1. Click on the vertical ellipsis icon of the ACTION column against a custom role row entry to load the menu options. Click on the Assign User(s) option to load the role assignment modal where you can assign relevant users to the existing role. This menu option is enabled for both system defined and custom created roles.

Fig: 48 - Enabled Assign User(s) menu option

2. The following modal window loads where you can assign user(s) or make modifications to the existing assigned user(s) list. There you can find two panels, one on the left and one on the right, labeled as Available Users and Assigned Users, respectively. The former lists out the existing users of your organization, while the latter lists out the users who are currently assigned to this role.

Fig: 49 - Modal window to assign user(s) to chosen role

3. Ensure that at least one listed user is moved from the Available Users panel to the Assigned Users panel. To move listed users, you can use the buttons provided in the middle of the modal window. Refer to the following four points stated below to understand how to move users between the panels.
   • Right arrow (>) button - Click on it after making checkbox selection(s) of the listed users of the Available Users panel to move the selected users to the Assigned Users panel. Multiple checkbox selection is permitted. Alternatively, you can also double click on the label to move it, instead of clicking on the right arrow icon.
   • Left arrow (<) button - Click on it after making checkbox selection(s) of the listed users of the Assigned Users panel to move the selected users to the Available Users panel. Multiple checkbox selection is permitted. Alternatively, you can also double click on the label to move it, instead of clicking on the left arrow icon.
   • Double right arrow (>>) button - Click on it to move the displayed users of the Available Users panel to the Assigned Users panel. If you have performed a search operation and then click on this button, then only the filtered users will be moved, while the other users who were not fetched by the search operation, will not be moved.
   • Double left arrow (<<) button - Click on it to move the displayed users of the Assigned Users panel to the Available Users panel. If you have performed a search operation and then click on this button, then only the filtered users will be moved, while the other users who were not fetched by the search operation, will not be moved.
4. Click on the Done button to confirm user assignment based on the selection(s) made.

Fig: 50 - Button to confirm user(s) assignment to the custom role

5. The modal window closes.

No Access to a Module:

If a user is not assigned to any of the roles specific to a module, then he/she will not get access to that entire module. For example, if a user is not a member of the Audit Super Admin, Audit Admin, and Audit Access Roles, then that user will not get the Audit Menu link on the navigation bar.

2.4.5. Cloning a Role

---

A Company Admin user can clone an existing system or a custom role to create a new role. All users assigned and accesses granted to the source role will be copied over to the new one, and you can remove some of the assigned accesses and assign new accesses to this new one. The same is applicable for users as well. This would facilitate creating roles in a very short time.

1. Click on the vertical ellipsis icon of the ACTION column against a custom role row entry to load the menu options. Click on the Clone option to load the role assignment modal. This menu option is enabled for both system defined and custom created roles.

Fig: 55 - Clone menu option

2. The following modal window loads where you may update the role name and the role description. The role name and description field values are loaded as the same, but a prefix label of Copy of is added before the role name.

Fig: 56 - Clone Role page view

The Company tab is selected by default. When you expand the Can Access Settings category from within the Company tab, then the following permissions are revealed:

• Can Access Roles
• Can Access Mail Templates
• Can Access Manage Objects

When you expand the Can Access Roles sub-category of the Can Access Settings category from within the Company tab, then the following permissions are revealed:

• Can View Roles
• Can Add / Edit / Clone / Delete Roles

When you expand the Can Access Mail Templates sub-category of the Can Access Settings category from within the Company tab, then the following permissions are revealed:

• Can View Mail Templates
• Can Edit Mail Templates

When you expand the Can Access Manage Objects sub-category of the Can Access Settings category from within the Company tab, then the following permissions are revealed:

• Can View Manage Objects
• Can Add / Edit / Delete Manage Objects
3. Next, click on the System Objects tab. The Audit tab is displayed after you click on it.

When you expand the View Accesses category of the Audit tab, then the following permissions are revealed:

• Can View All Audits
• Can View Audits assign to me
• Can Download an Audit Report
• Can View Past / Completed Audit Reports

When you expand the Add / Edit Accesses category of the Audit tab, then the following permissions are revealed:

• Can Add / Edit an Audit
• Can Attest an Audit
• Can Remediate an Audit
• Can Resolve Red Flagged Questions
• Can Add / Edit Questionnaire Template

When you expand the Delete Accesses category of the Audit tab, then the following permission is revealed:

• Can Delete a (Not Started) Audit

When you expand the View Accesses category of the Attestation tab, then the following permissions are revealed:

• Can View All Attestations
• Can View Attestations assign to me
• Can View Past Attestation Reports (All)
• Can View Past Attestation Reports (Self)

When you expand the Add / Edit Accesses category of the Attestation tab, then the following permissions are revealed:

• Can Add / Edit an Attestation
• Can Attest an Attestation
• Can Remediate an Attestation
• Can Resolve Red Flagged Questions
• Can Add / Edit Questionnaire Template
• Can Send Reminder

When you expand the Delete Accesses category of the Attestation tab, then the following permission is revealed:

• Can Delete a (Not Started) Attestation

When you expand the View Accesses category of the Code of Ethics tab, then the following permissions are revealed:

• Can View All Requests
• Can View Requests Submitted by Me or my subordinates
• Can View Rules
• Can View all Completed Requests
• Can View Completed Code of Ethics Requests submitted by me and my subordinates

When you expand the Add / Edit Accesses category of the Code of Ethics tab, then the following permissions are revealed:

• Can Add Requests
• Can Approve or Reject all Requests
• Can Approve / Reject Requests Submitted by my subordinates
• Can Add / Edit Rules

When you expand the View Accesses category of the Vendor Management tab, then the following permissions are revealed:

• Can View All VDD
• Can View My VDD
• Can Download a VDD Report
• Can View Past / Completed Vendor Assessment Reports

When you expand the Add / Edit Accesses category of the Vendor Management tab, then the following permissions are revealed:

• Can Add / Edit a Vendor
• Can Add / Edit an Assessment for all Vendors
• Can Conduct All Assessments
• Can Remediate Assessments
• Can Resolve Red Flagged Questions
• Can Add / Edit Questionnaire Template

When you navigate to the Cyber tab, then the following permission category is revealed:

• Can do all operations related to Cyber Dashboard in terms of viewing as well as widget and dashboard configurations

When you expand the Can do all operations related to Cyber Dashboard in terms of viewing as well as widget and dashboard configurations category of the Cyber tab, then the following granular permissions are revealed:

• Can do all operations related to Incident
• Can resolve Incident

When you navigate to the Marketing_Review tab, then the following permission category is revealed:

• Can do all operations in the Marketing Review module

When you expand the Can do all operations in the Marketing Review module category of the Marketing_Review tab, then the following granular permissions are revealed:

• Can View Marketing Review
• Can View Marketing Review Assign to me
• Add / Edit Marketing Review
• Delete Marketing Review
• Upload Marketing Review
• Approve Marketing Review

When you navigate to the E_Comms tab, then the following permission category is revealed:

• Can do all operations in the E-Comms Surveillance module

When you expand the Can do all operations in the E-Comms Surveillance module category of the E_Comms tab, then the following granular permissions are revealed:

• Can View E-Comms Surveillance
• Can View E-Comms Surveillance Assign to me
• Add / Edit E-Comms Surveillance
• Delete E-Comms Surveillance


4. The permissions granted in the parent role, or the role being used to create this cloned copy are also copied over as it is. You can make applicable changes to the above-mentioned slider states. After the permissions are granted as required, ensure that at least one listed user is moved from the Available Users panel to the Assigned Users panel when assigning users. During cloning, assigned users are not copied over to the cloned copy of the role, even if users were assigned to the parent or original role from which the cloned role is being made.

Fig: 57 - Assigning users to the cloned role

5. Click on the Done button to confirm user assignment based on the selection(s) made.

Fig: 58 - Button to confirm user(s) assignment to the custom role

6. Click on the Submit button to create this cloned role.

Fig: 59 - Submit button to create cloned role

7. Get redirected to the Roles page. The cloned role gets listed in the grid view. The System column displays a No label since this cloned role is also a custom role.

Fig: 60 - Cloned role getting listed

3. Annexure > Tables for System Defined Roles

3.1. Table of Company / Branch Admin Role Permissions

---

Permissions of the Company tab

Main Tab Header	Sub-Tab Label	Operations	1st Level	2nd Level	3rd Level	Permission	Permission Description
Company	N/A	Can do all operations in all the modules in SurgeONE	Can Access Settings			Granted	This access will allow to do all operations across the entire SurgeONE application
				Can Access Roles		Granted	This access will expose the Settings menu link on the navigation bar
					Can View Roles	Granted	This access will allow to view all the existing roles defined for the organization
					Can Add / Edit / Clone / Delete Roles	Granted	This access will allow to add, edit, clone and delete roles for the organization
				Can Access Mail Templates		Granted	This access will expose the Mail Templates menu link on the navigation bar
					Can View Mail Templates	Granted	This access will allow to view all the existing mail templates defined for the organization
					Can Edit Mail Templates	Granted	This access will allow to add and edit mail templates for the organization
				Can Access Manage Objects		Granted	This access will expose the Manage Objects menu link on the navigation bar
					Can View Manage Objects	Granted	This access will allow to view all the existing attributes defined for the organization
					Can Add / Edit / Delete Manage Objects	Granted	This access will allow to add, edit and delete attributes for the organization

Permissions of the System Objects tab

Main Tab Header	Sub-Tab Label	Operations	1st Level	2nd Level	Permission	Permission Description
System Objects	Audits	Can do all operations in the Audit module			Granted	This access will allow to do all operations in the Audit module
			View Accesses		Granted	This access will allow all view related permissions in the Audit module
				Can View All Audits	Granted	This access will allow to view all audits submitted in the application
				Can View Audits assign to me	Granted	This access will allow to view those specific audits for which the logged in user is either the Submitter or Auditor or Auditee
				Can Download an Audit Report	Granted	This access will allow to download an audit report for each audit from the Audit Calendar page or from the Past Audits report page
				Can View Past / Completed Audit Reports	Granted	This access will allow to view all completed audit reports
			Add / Edit Accesses		Granted	This access will allow add and edit related accesses in the Audit module
				Can Add / Edit an Audit	Granted	This access will allow to schedule an audit and edit existing audits that have not yet been started
				Can Conduct an Audit	Granted	This access will allow to conduct or execute an unassigned audit
				Can Remediate an Audit	Granted	This access will allow to remediate an audit with red flags post execution stage
				Can Resolve Red Flagged Questions	Granted	This access will expose the Resolve button and will allow to resolve the red flagged questions in the remediation stage of an audit
				Can Add / Edit Questionnaire Template	Granted	This access will allow to add a new questionnaire template and edit an existing questionnaire template in the Audit module
			Delete Accesses		Granted	This access will allow all delete related actions in the Audit module
				Can Delete a (Not Started) Audit	Granted	This access will allow to delete an audit that is in Not Started status
	Attestations	Can do all operations in the Attestation module			Granted	This access will allow to do all operations in the Attestation module
			View Accesses		Granted	This access will allow all view related permissions in the Attestation module
				Can View All Attestations	Granted	This access will allow to view all attestations submitted in the attestation
				Can View Attestations assign to me	Granted	This access will allow to view specific attestations for which the logged in user is Submitter or Attestor
				Can View Past Attestation Reports (All)	Granted	This access will allow to view the reports of all the completed attestations
				Can View Past Attestation Reports (Self)	Granted	This access will allow to view the reports for the specific completed attestations where the logged in user is an attestor
			Add / Edit Accesses		Granted	This access will allow all add and edit related permissions in the Attestation module
				Can Add / Edit an Attestation	Granted	This access will allow to schedule an attestation and edit existing attestations that have not yet been started
				Can Attest an Attestation	Granted	This access will allow to respond to the questionnaire of an assigned attestation
				Can Remediate an Attestation	Granted	This access will allow to remediate an attestation with red flags post execution stage
				Can Resolve Red Flagged Questions	Granted	This access will expose the Resolve button and will allow to resolve the red flagged questions in the remediation stage of an attestation
				Can Add / Edit Questionnaire Template	Granted	This access will allow to add a new covering email and questionnaire template and edit an existing questionnaire template in the Attestation module
				Can Send Reminder	Granted	This access will allow to send reminder to the attestors for an assigned attestation that has become overdue
			Delete Accesses		Granted	This access will allow all delete related permissions in the Attestation module
				Can Delete a (Not Started) Attestation	Granted	This access will allow to delete an attestation that is in Not Started status
	Code of Ethics	Can do all operations in the Code of Ethics module			Granted	This access will allow to do all operations in the Code of Ethics module
			View Accesses		Granted	This access will allow to view all Code of Ethics requests submitted in the application
				Can View All Requests	Granted	This access will allow to view all Code of Ethics requests submitted in the application
				Can View Requests Submitted by Me or my subordinates	Granted	This access will allow to view all Code of Ethics requests submitted by the logged in user or his or her subordinates
				Can View Rules	Granted	This access will allow to view all the rules defined for Political Contributions, Outside Business Activities and Gifts & Entertainment
				Can View all Completed Requests	Granted	This access will allow to view all completed requests submitted in the Code of Ethics module
				Can View Completed Code of Ethics Requests submitted by me and my subordinates	Granted	This access will allow to view all completed requests submitted in the Code of Ethics module for which the logged in user is Submitter
			Add / Edit Accesses		Granted	This access will allow all add and edit related permissions in the Code of Ethics module
				Can Add Requests	Granted	This access will allow to add a request in any of the types in the Code of Ethics module
				Can Approve or Reject all Requests	Granted	This access will allow to approve or reject all the pending review requests submitted in any of the types in the Code of Ethics module
				Can Approve / Reject Requests Submitted by my subordinates	Granted	This access will allow to approve or reject specific pending review requests submitted only by the subordinates of the logged in user in any of the types in the Code of Ethics module
				Can Add / Edit Rules	Granted	This access will allow to define a new rule and edit existing rules
	Vendor Management	Can do all operations in the Vendor Management module			Granted	This access will allow to do all operations in the Vendor Management module
			View Accesses		Granted	This access will allow all view related permissions in the Vendor Management module
				Can View All VDD	Granted	This access will allow to view all vendor assessments submitted in the application
				Can View My VDD	Granted	This access will allow to view all vendor assessments submitted in the application by the logged-in user
				Can Download VDD Report	Granted	This access will allow to download a vendor assessment report
				Can View Past / Completed Vendor Assessment Reports	Granted	This access will allow to view all the completed vendor assessment reports
			Add / Edit Accesses		Granted	This access will allow all add and edit related permissions in the Vendor Management module
				Can Add / Edit a Vendor	Granted	This access will allow to add a vendor and edit any existing vendors
				Can Add / Edit an Assessment for all Vendors	Granted	This access will allow to schedule an assessment and edit existing assessments that have not yet been started
				Can Conduct All Assessments	Granted	This access will allow to conduct all vendor assessments
				Can Remediate Assessments	Granted	This access will allow to remediate an assessment with red flags post execution stage
				Can Resolve Red Flagged Questions	Granted	This access will expose the Resolve button and will allow to resolve the red flagged questions in the remediation stage of all vendor assessments
				Can Add / Edit Questionnaire Template	Granted	This access will allow to add a new questionnaire template and edit an existing questionnaire template in the Vendor assessment module
	Cyber	Can do all operations related to Cyber Dashboard in terms of viewing as well as widget and dashboard configurations			Granted	This access will allow to do all operations in the Track Cyber / Cyber Compliance module
			Can do all operations related to Incident	N/A	Granted	This access will allow to do all operation in the Incident Management module
			Can resolve Incident	N/A	Granted	This access will allow to resolve Incident
	Marketing Review	Can do all operations in the Marketing Review module			Granted	This access will allow to do all operations in the Marketing Review module
			Can View Marketing Review	N/A	Granted	This access will allow to view all Marketing Review submitted in the application
			Can View Marketing Review Assign to me	N/A	Granted	This access will allow to view all Marketing Review submitted by me
			Add / Edit Marketing Review	N/A	Granted	This access will permit all add and edit related accesses in the Marketing Review module
			Delete Marketing Review	N/A	Granted	This access will allow all delete related actions in the Marketing Review module
			Upload Marketing Review	N/A	Granted	This access will permit all upload related accesses in the Marketing Review module
			Approve Marketing Review	N/A	Granted	This access will permit all approve related accesses in the Marketing Review module
E-Comms	Can do all operations in the E-Comms Surveillance module			Granted	This access will allow to do all operations in the E-Comms module
		Can View E-Comms Surveillance	N/A	Granted	This access will allow to view all E-Comms submitted in the application
		Can View E-Comms Surveillance Assign to me	N/A	Granted	This access will allow to view all E-Comms submitted by me
		Add / Edit E-Comms Surveillance	N/A	Granted	This access will permit all add and edit related accesses in the E-Comms module
		Delete E-Comms Surveillance	N/A	Granted	This access will allow all delete related actions in the E-Comms module

3.2. Table of Audit Super Admin Role Permissions

---

Main Tab Header	Sub-Tab Label	Operations	1st Level	2nd Level	Permission	Permission Description
System Objects	Audits	Can do all operations in the Audit module			Granted	This access will allow to do all operations in the Audit module
			View Accesses		Granted	This access will allow all view related permissions in the Audit module
				Can View All Audits	Granted	This access will allow to view all audits submitted in the application
				Can View Audits assign to me	Granted	This access will allow to view those specific audits for which the logged in user is either the Submitter or Auditor or Auditee
				Can Download an Audit Report	Granted	This access will allow to download an audit report for each audit from the Audit Calendar page or from the Past Audits report page
				Can View Past / Completed Audit Reports	Granted	This access will allow to view all completed audit reports
			Add / Edit Accesses		Granted	This access will allow add and edit related permissions in the Audit module
				Can Add / Edit an Audit	Granted	This access will allow to schedule an audit and edit existing audits that have not yet been started
				Can Conduct an Audit	Granted	This access will allow to conduct or execute an unassigned audit
				Can Remediate an Audit	Granted	This access will allow to remediate an audit with red flags post execution stage
				Can Resolve Red Flagged Questions	Granted	This access will expose the Resolve button and will allow to resolve the red flagged questions in the remediation stage of an audit
				Can Add / Edit Questionnaire Template	Granted	This access will allow to add a new questionnaire template and edit an existing questionnaire template in the Audit module
			Delete Accesses		Granted	This access will allow all delete related actions in the Audit module
				Can Delete a (Not Started) Audit	Granted	This access will allow to delete an audit that is in Not Started status

3.3. Table of Audit Admin Role Permissions

---

Main Tab Header	Sub-Tab Label	Operations	1st Level	2nd Level	Permission	Permission Description
System Objects	Audits	Can do all operations in the Audit module			Partially Granted	This access will allow to do all operations in the Audit module
			View Accesses		Partially Granted	This access will allow all view related permissions in the Audit module
				Can View All Audits	Disabled	This access will allow to view all audits submitted in the application
				Can View Audits assign to me	Granted	This access will allow to view those specific audits for which the logged in user is either the Submitter or Auditor or Auditee
				Can Download an Audit Report	Granted	This access will allow to download an audit report for each audit from the Audit Calendar page or from the Past Audits report page
				Can View Past / Completed Audit Reports	Granted	This access will allow to view all completed audit reports
			Add / Edit Accesses		Partially Granted	This access will allow add and edit related accesses in the Audit module
				Can Add / Edit an Audit	Granted	This access will allow to schedule an audit and edit existing audits that have not yet been started
				Can Conduct an Audit	Granted	This access will allow to conduct or execute an unassigned audit
				Can Remediate an Audit	Granted	This access will allow to remediate an audit with red flags post execution stage
				Can Resolve Red Flagged Questions	Granted	This access will expose the Resolve button and will allow to resolve the red flagged questions in the remediation stage of an audit
				Can Add / Edit Questionnaire Template	Disabled	This access will allow to add a new questionnaire template and edit an existing questionnaire template in the Audit module
			Delete Accesses		Granted	This access will allow all delete related actions in the Audit module
				Can Delete a (Not Started) Audit	Granted	This access will allow to delete an audit that is in Not Started status

3.4. Table of Audit Access Role Permissions

---

Main Tab Header	Sub-Tab Label	Operations	1st Level	2nd Level	Permission	Permission Description
System Objects	Audits	Can do all operations in the Audit module			Partially Granted	This access will allow to do all operations in the Audit module
			View Accesses		Partially Granted	This access will allow all view related permissions in the Audit module
				Can View All Audits	Disabled	This access will allow to view all audits submitted in the application
				Can View Audits assign to me	Granted	This access will allow to view those specific audits for which the logged in user is either the Submitter or Auditor or Auditee
				Can Download an Audit Report	Granted	This access will allow to download an audit report for each audit from the Audit Calendar page or from the Past Audits report page
				Can View Past / Completed Audit Reports	Granted	This access will allow to view all completed audit reports
			Add / Edit Accesses		Partially Granted	This access will allow add and edit related accesses in the Audit module
				Can Add / Edit an Audit	Disabled	This access will allow to schedule an audit and edit existing audits that have not yet been started
				Can Conduct an Audit	Granted	This access will allow to conduct or execute an unassigned audit
				Can Remediate an Audit	Granted	This access will allow to remediate an audit with red flags post execution stage
				Can Resolve Red Flagged Questions	Disabled	This access will expose the Resolve button and will allow to resolve the red flagged questions in the remediation stage of an audit
				Can Add / Edit Questionnaire Template	Disabled	This access will allow to add a new questionnaire template and edit an existing questionnaire template in the Audit module
			Delete Accesses		Disabled	This access will allow all delete related actions in the Audit module
				Can Delete a (Not Started) Audit	Disabled	This access will allow to delete an audit that is in Not Started status

3.5. Table of Attestation Admin Role Permissions

---

Main Tab Header	Sub-Tab Label	Operations	1st Level	2nd Level	Permission	Permission Description
System Objects	Attestations	Can do all operations in the Attestation module			Granted	This access will allow to do all operations in the Attestation module
			View Accesses		Granted	This access will allow all view related permissions in the Attestation module
				Can View All Attestations	Granted	This access will allow to view all attestations submitted in the attestation
				Can View Attestations assign to me	Granted	This access will allow to view specific attestations for which the logged in user is Submitter or Attestor
				Can View Past Attestation Reports (All)	Granted	This access will allow to view the reports of all the completed attestations
				Can View Past Attestation Reports (Self)	Granted	This access will allow to view the reports for the specific completed attestations where the logged in user is an attestor
			Add / Edit Accesses		Granted	This access will allow all add and edit related permissions in the Attestation module
				Can Add / Edit an Attestation	Granted	This access will allow to schedule an attestation and edit existing attestations that have not yet been started
				Can Attest an Attestation	Granted	This access will allow to respond to the questionnaire of an assigned attestation
				Can Remediate an Attestation	Granted	This access will allow to remediate an attestation with red flags post execution stage
				Can Resolve Red Flagged Questions	Granted	This access will expose the Resolve button and will allow to resolve the red flagged questions in the remediation stage of an attestation
				Can Add / Edit Questionnaire Template	Granted	This access will allow to add a new covering email and questionnaire template and edit an existing questionnaire template in the Attestation module
				Can Send Reminder	Granted	This access will allow to send reminder to the attestors for an assigned attestation that has become overdue
			Delete Accesses		Granted	This access will allow all delete related permissions in the Attestation module
				Can Delete a (Not Started) Attestation	Granted	This access will allow to delete an attestation that is in Not Started status

3.6. Table of Attestation Access Role Permissions

---

Main Tab Header	Sub-Tab Label	Operations	1st Level	2nd Level	Permission	Permission Description
System Objects	Attestations	Can do all operations in the Attestation module			Partially Granted	This access will allow to do all operations in the Attestation module
			View Accesses		Partially Granted	This access will allow all view related permissions in the Attestation module
				Can View All Attestations	Disabled	This access will allow to view all attestations submitted in the attestation
				Can View Attestations assign to me	Granted	This access will allow to view specific attestations for which the logged in user is Submitter or Attestor
				Can View Past Attestation Reports (All)	Disabled	This access will allow to view the reports of all the completed attestations
				Can View Past Attestation Reports (Self)	Granted	This access will allow to view the reports for the specific completed attestations where the logged in user is an attestor
			Add / Edit Accesses		Partially Granted	This access will allow all add and edit related permissions in the Attestation module
				Can Add / Edit an Attestation	Disabled	This access will allow to schedule an attestation and edit existing attestations that have not yet been started
				Can Attest an Attestation	Granted	This access will allow to respond to the questionnaire of an assigned attestation
				Can Remediate an Attestation	Granted	This access will allow to remediate an attestation with red flags post execution stage
				Can Resolve Red Flagged Questions	Disabled	This access will expose the Resolve button and will allow to resolve the red flagged questions in the remediation stage of an attestation
				Can Add / Edit Questionnaire Template	Disabled	This access will allow to add a new covering email and questionnaire template and edit an existing questionnaire template in the Attestation module
				Can Send Reminder	Disabled	This access will allow to send reminder to the attestors for an assigned attestation that has become overdue
			Delete Accesses		Disabled	This access will allow all delete related permissions in the Attestation module
				Can Delete a (Not Started) Attestation	Disabled	This access will allow to delete an attestation that is in Not Started status

3.7. Table of Code of Ethics Admin Role Permissions

---

Main Tab Header	Sub-Tab Label	Operations	1st Level	2nd Level	Permission	Permission Description
System Objects	Code of Ethics	Can do all operations in the Code of Ethics module			Granted	This access will allow to do all operations in the Code of Ethics module
			View Accesses		Granted	This access will allow to view all Code of Ethics requests submitted in the application
				Can View All Requests	Granted	This access will allow to view all Code of Ethics requests submitted in the application
				Can View Requests Submitted by Me or my subordinates	Granted	This access will allow to view all Code of Ethics requests submitted by the logged in user or his or her subordinates
				Can View Rules	Granted	This access will allow to view all the rules defined for Political Contributions, Outside Business Activities and Gifts & Entertainment
				Can View all Completed Requests	Granted	This access will allow to view all completed requests submitted in the Code of Ethics module
				Can View Completed Code of Ethics Requests submitted by me and my subordinates	Granted	This access will allow to view all completed requests submitted in the Code of Ethics module for which the logged in user is Submitter
			Add / Edit Accesses		Granted	This access will allow all add and edit related permissions in the Code of Ethics module
				Can Add Requests	Granted	This access will allow to add a request in any of the types in the Code of Ethics module
				Can Approve or Reject all Requests	Granted	This access will allow to approve or reject all the pending review requests submitted in any of the types in the Code of Ethics module
				Can Approve / Reject Requests Submitted by my subordinates	Granted	This access will allow to approve or reject specific pending review requests submitted only by the subordinates of the logged in user in any of the types in the Code of Ethics module
				Can Add / Edit Rules	Granted	This access will allow to define a new rule and edit existing rules

3.8. Table of Code of Ethics Access Role Permissions

---

Main Tab Header	Sub-Tab Label	Operations	1st Level	2nd Level	Permission	Permission Description
System Objects	Code of Ethics	Can do all operations in the Code of Ethics module			Partially Granted	This access will allow to do all operations in the Code of Ethics module
			View Accesses		Partially Granted	This access will allow to view all Code of Ethics requests submitted in the application
				Can View All Requests	Disabled	This access will allow to view all Code of Ethics requests submitted in the application
				Can View Requests Submitted by Me or my subordinates	Granted	This access will allow to view all Code of Ethics requests submitted by the logged in user or his or her subordinates
				Can View Rules	Granted	This access will allow to view all the rules defined for Political Contributions, Outside Business Activities and Gifts & Entertainment
				Can View all Completed Requests	Disabled	This access will allow to view all completed requests submitted in the Code of Ethics module
				Can View Completed Code of Ethics Requests submitted by me and my subordinates	Granted	This access will allow to view all completed requests submitted in the Code of Ethics module for which the logged in user is Submitter
			Add / Edit Accesses		Partially Granted	This access will allow all add and edit related permissions in the Code of Ethics module
				Can Add Requests	Granted	This access will allow to add a request in any of the types in the Code of Ethics module
				Can Approve or Reject all Requests	Disabled	This access will allow to approve or reject all the pending review requests submitted in any of the types in the Code of Ethics module
				Can Approve / Reject Requests Submitted by my subordinates	Granted	This access will allow to approve or reject specific pending review requests submitted only by the subordinates of the logged in user in any of the types in the Code of Ethics module
				Can Add / Edit Rules	Disabled	This access will allow to define a new rule and edit existing rules

3.9. Table of Vendor Admin Role Permissions

---

Main Tab Header	Sub-Tab Label	Operations	1st Level	2nd Level	Permission	Permission Description
System Objects	Vendor Management	Can do all operations in the Vendor Management module			Granted	This access will allow to do all operations in the Vendor Management module
			View Accesses		Granted	This access will allow all view related permissions in the Vendor Management module
				Can View All VDD	Granted	This access will allow to view all vendor assessments submitted in the application
				Can View My VDD	Granted	This access will allow to view all vendor assessments submitted in the application by the logged-in user
				Can Download VDD Report	Granted	This access will allow to download a vendor assessment report
				Can View Past / Completed Vendor Assessment Reports	Granted	This access will allow to view all the completed vendor assessment reports
			Add / Edit Accesses		Granted	This access will allow all add and edit related permissions in the Vendor Management module
				Can Add / Edit a Vendor	Granted	This access will allow to add a vendor and edit any existing vendors
				Can Add / Edit an Assessment for all Vendors	Granted	This access will allow to schedule an assessment and edit existing assessments that have not yet been started
				Can Conduct All Assessments	Granted	This access will allow to conduct all vendor assessments
				Can Remediate Assessments	Granted	This access will allow to remediate an assessment with red flags post execution stage
				Can Resolve Red Flagged Questions	Granted	This access will expose the Resolve button and will allow to resolve the red flagged questions in the remediation stage of all vendor assessments
				Can Add / Edit Questionnaire Template	Granted	This access will allow to add a new questionnaire template and edit an existing questionnaire template in the Vendor assessment module

3.10. Table of Cyber Admin Role Permissions

---

Main Tab Header	Sub-Tab Label	Operations	1st Level	2nd Level	Permission	Permission Description
System Objects	Cyber	Can do all operations related to Cyber Dashboard in terms of viewing as well as widget and dashboard configurations			Granted	This access will allow to do all operations in the Track Cyber / Cyber Compliance module
			Can do all operations related to Incident	N/A	Granted	This access will allow to do all operation in the Incident Management module
			Can resolve Incident	N/A	Granted	This access will allow to resolve Incident

3.11. Table of Registered Representative Role Permissions

---

Main Tab Header	Sub-Tab Label	Operations	1st Level	2nd Level	Permission	Permission Description
System Objects	Audits	Can do all operations in the Audit module			Partially Granted	This access will allow to do all operations in the Audit module
			View Accesses		Partially Granted	This access will allow all view related permissions in the Audit module
				Can View All Audits	Disabled	This access will allow to view all audits submitted in the application
				Can View Audits assign to me	Granted	This access will allow to view those specific audits for which the logged in user is either the Submitter or Auditor or Auditee
				Can Download an Audit Report	Granted	This access will allow to download an audit report for each audit from the Audit Calendar page or from the Past Audits report page
				Can View Past / Completed Audit Reports	Granted	This access will allow to view all completed audit reports
			Add / Edit Accesses		Partially Granted	This access will allow add and edit related accesses in the Audit module
				Can Add / Edit an Audit	Disabled	This access will allow to schedule an audit and edit existing audits that have not yet been started
				Can Conduct an Audit	Granted	This access will allow to conduct or execute an unassigned audit
				Can Remediate an Audit	Granted	This access will allow to remediate an audit with red flags post execution stage
				Can Resolve Red Flagged Questions	Disabled	This access will expose the Resolve button and will allow to resolve the red flagged questions in the remediation stage of an audit
				Can Add / Edit Questionnaire Template	Disabled	This access will allow to add a new questionnaire template and edit an existing questionnaire template in the Audit module
			Delete Accesses		Disabled	This access will allow all delete related actions in the Audit module
				Can Delete a (Not Started) Audit	Disabled	This access will allow to delete an audit that is in Not Started status
	Attestations	Can do all operations in the Attestation module			Partially Granted	This access will allow to do all operations in the Attestation module
			View Accesses		Granted	This access will allow all view related permissions in the Attestation module
				Can View All Attestations	Granted	This access will allow to view all attestations submitted in the attestation
				Can View Attestations assign to me	Granted	This access will allow to view specific attestations for which the logged in user is Submitter or Attestor
				Can View Past Attestation Reports (All)	Granted	This access will allow to view the reports of all the completed attestations
				Can View Past Attestation Reports (Self)	Granted	This access will allow to view the reports for the specific completed attestations where the logged in user is an attestor
			Add / Edit Accesses		Partially Granted	This access will allow all add and edit related permissions in the Attestation module
				Can Add / Edit an Attestation	Disabled	This access will allow to schedule an attestation and edit existing attestations that have not yet been started
				Can Attest an Attestation	Granted	This access will allow to respond to the questionnaire of an assigned attestation
				Can Remediate an Attestation	Granted	This access will allow to remediate an attestation with red flags post execution stage
				Can Resolve Red Flagged Questions	Disabled	This access will expose the Resolve button and will allow to resolve the red flagged questions in the remediation stage of an attestation
				Can Add / Edit Questionnaire Template	Disabled	This access will allow to add a new covering email and questionnaire template and edit an existing questionnaire template in the Attestation module
				Can Send Reminder	Granted	This access will allow to send reminder to the attestors for an assigned attestation that has become overdue
			Delete Accesses		Disabled	This access will allow all delete related permissions in the Attestation module
				Can Delete a (Not Started) Attestation	Disabled	This access will allow to delete an attestation that is in Not Started status
	Code of Ethics	Can do all operations in the Code of Ethics module			Partially Granted	This access will allow to do all operations in the Code of Ethics module
			View Accesses		Partially Granted	This access will allow to view all Code of Ethics requests submitted in the application
				Can View All Requests	Granted	This access will allow to view all Code of Ethics requests submitted in the application
				Can View Requests Submitted by Me or my subordinates	Granted	This access will allow to view all Code of Ethics requests submitted by the logged in user or his or her subordinates
				Can View Rules	Granted	This access will allow to view all the rules defined for Political Contributions, Outside Business Activities and Gifts & Entertainment
				Can View all Completed Requests	Granted	This access will allow to view all completed requests submitted in the Code of Ethics module
				Can View Completed Code of Ethics Requests submitted by me and my subordinates	Disabled	This access will allow to view all completed requests submitted in the Code of Ethics module for which the logged in user is Submitter
			Add / Edit Accesses		Partially Granted	This access will allow all add and edit related permissions in the Code of Ethics module
				Can Add Requests	Granted	This access will allow to add a request in any of the types in the Code of Ethics module
				Can Approve or Reject all Requests	Granted	This access will allow to approve or reject all the pending review requests submitted in any of the types in the Code of Ethics module
				Can Approve / Reject Requests Submitted by my subordinates	Granted	This access will allow to approve or reject specific pending review requests submitted only by the subordinates of the logged in user in any of the types in the Code of Ethics module
				Can Add / Edit Rules	Disabled	This access will allow to define a new rule and edit existing rules
	Cyber	Can do all operations related to Cyber Dashboard in terms of viewing as well as widget and dashboard configurations			Disabled	This access will allow to do all operations in the Track Cyber / Cyber Compliance module
			Can do all operations related to Incident	N/A	Granted	This access will allow to do all operation in the Incident Management module
			Can resolve Incident	N/A	Granted	This access will allow to resolve Incident

3.12. Table of Incident Manager Role Permissions

---

Main Tab Header	Sub-Tab Label	Operations	1st Level	2nd Level	Permission	Permission Description
System Objects	Cyber	Can do all operations related to Cyber Dashboard in terms of viewing as well as widget and dashboard configurations			Disabled	This access will allow to do all operations in the Track Cyber / Cyber Compliance module
			Can do all operations related to Incident	N/A	Granted	This access will allow to do all operation in the Incident Management module
			Can resolve Incident	N/A	Granted	This access will allow to resolve Incident

3.13. Table of Incident Resolution Team Role Permissions

---

Main Tab Header	Sub-Tab Label	Operations	1st Level	2nd Level	Permission	Permission Description
System Objects	Cyber	Can do all operations related to Cyber Dashboard in terms of viewing as well as widget and dashboard configurations			Partially Granted	This access will allow to do all operations in the Track Cyber / Cyber Compliance module
			Can do all operations related to Incident	N/A	Disabled	This access will allow to do all operation in the Incident Management module
			Can resolve Incident	N/A	Granted	This access will allow to resolve Incident

3.14. Table of Marketing Review Super Admin Role Permissions

---

Main Tab Header	Sub-Tab Label	Operations	1st Level	2nd Level	Permission	Permission Description
System Objects	Marketing Review	Can do all operations in the Marketing Review module			Partially Granted	This access will allow to do all operations in the Marketing Review module
			Can View Marketing Review	N/A	Granted	This access will allow to view all Marketing Review submitted in the application
			Can View Marketing Review Assign to me	N/A	Granted	This access will allow to view all Marketing Review submitted by me
			Add / Edit Marketing Review	N/A	Granted	This access will permit all add and edit related accesses in the Marketing Review module
			Delete Marketing Review	N/A	Granted	This access will allow all delete related actions in the Marketing Review module
			Upload Marketing Review	N/A	Granted	This access will permit all upload related accesses in the Marketing Review module
			Approve Marketing Review	N/A	Disabled	This access will permit all approve related accesses in the Marketing Review module

3.15. Table of Marketing Review Content Approver Role Permissions

---

Main Tab Header	Sub-Tab Label	Operations	1st Level	2nd Level	Permission	Permission Description
System Objects	Marketing Review	Can do all operations in the Marketing Review module			Partially Granted	This access will allow to do all operations in the Marketing Review module
			Can View Marketing Review	N/A	Granted	This access will allow to view all Marketing Review submitted in the application
			Can View Marketing Review Assign to me	N/A	Disabled	This access will allow to view all Marketing Review submitted by me
			Add / Edit Marketing Review	N/A	Granted	This access will permit all add and edit related accesses in the Marketing Review module
			Delete Marketing Review	N/A	Granted	This access will allow all delete related actions in the Marketing Review module
			Upload Marketing Review	N/A	Granted	This access will permit all upload related accesses in the Marketing Review module
			Approve Marketing Review	N/A	Granted	This access will permit all approve related accesses in the Marketing Review module

3.16. Table of Marketing Review Content Provider Role Permissions

---

Main Tab Header	Sub-Tab Label	Operations	1st Level	2nd Level	Permission	Permission Description
System Objects	Marketing Review	Can do all operations in the Marketing Review module			Partially Granted	This access will allow to do all operations in the Marketing Review module
			Can View Marketing Review	N/A	Disabled	This access will allow to view all Marketing Review submitted in the application
			Can View Marketing Review Assign to me	N/A	Granted	This access will allow to view all Marketing Review submitted by me
			Add / Edit Marketing Review	N/A	Disabled	This access will permit all add and edit related accesses in the Marketing Review module
			Delete Marketing Review	N/A	Disabled	This access will allow all delete related actions in the Marketing Review module
			Upload Marketing Review	N/A	Granted	This access will permit all upload related accesses in the Marketing Review module
			Approve Marketing Review	N/A	Disabled	This access will permit all approve related accesses in the Marketing Review module

3.17. Table of E-Comms Surveillance Super Admin Role Permissions

---

Main Tab Header	Sub-Tab Label	Operations	1st Level	2nd Level	Permission	Permission Description
System Objects	E-Comms	Can do all operations in the E-Comms Surveillance module			Granted	This access will allow to do all operations in the E-Comms module
			Can View E-Comms Surveillance	N/A	Granted	This access will allow to view all E-Comms submitted in the application
			Can View E-Comms Surveillance Assign to me	N/A	Granted	This access will allow to view all E-Comms submitted by me
			Add / Edit E-Comms Surveillance	N/A	Granted	This access will permit all add and edit related accesses in the E-Comms module
			Delete E-Comms Surveillance	N/A	Granted	This access will allow all delete related actions in the E-Comms module

3.18. Table of E-Comms Surveillance Admin Role Permissions

---

Main Tab Header	Sub-Tab Label	Operations	1st Level	2nd Level	Permission	Permission Description
System Objects	E-Comms	Can do all operations in the E-Comms Surveillance module			Partially Granted	This access will allow to do all operations in the E-Comms module
			Can View E-Comms Surveillance	N/A	Granted	This access will allow to view all E-Comms submitted in the application
			Can View E-Comms Surveillance Assign to me	N/A	Disabled	This access will allow to view all E-Comms submitted by me
			Add / Edit E-Comms Surveillance	N/A	Granted	This access will permit all add and edit related accesses in the E-Comms module
			Delete E-Comms Surveillance	N/A	Granted	This access will allow all delete related actions in the E-Comms module

3.19. Table of E-Comms Surveillance Access Role Permissions

---

Main Tab Header	Sub-Tab Label	Operations	1st Level	2nd Level	Permission	Permission Description
System Objects	E-Comms	Can do all operations in the E-Comms Surveillance module			Partially Granted	This access will allow to do all operations in the E-Comms module
			Can View E-Comms Surveillance	N/A	Disabled	This access will allow to view all E-Comms submitted in the application
			Can View E-Comms Surveillance Assign to me	N/A	Granted	This access will allow to view all E-Comms submitted by me
			Add / Edit E-Comms Surveillance	N/A	Disabled	This access will permit all add and edit related accesses in the E-Comms module
			Delete E-Comms Surveillance	N/A	Disabled	This access will allow all delete related actions in the E-Comms module