AuditFindings uses groups to control what each user can see and do. Administrators can assign a user to one or more groups, and each group defines audit scope and feature permissions.
Open group management
- Sign in to AuditFindings with an administrator account.
- Select Admin.
- Select User Management.
- Select the Group tab.
How group access works
- System-generated groups provide standard access patterns. If a group's description says it should not be removed or edited, copy that group before making a customized version.
- Custom groups let administrators match access to a team's responsibilities.
- A user can belong to more than one group. Review the combined permissions before saving a membership change.
- Group names can vary by subscription, enabled modules, and organization-specific configuration.
Review a group's permissions
- On the Group tab, locate the group and select its edit icon.
- Use General to review the group description and membership.
- Use Audit/Issue Access to review whether the group can access all audits and issues or is limited by assignment, ownership, or configured fields.
- Review the feature tabs: Dashboard, Audits, Issues, CAPs, Files, and Reports.
- For each feature, confirm the permission shown for every field or action. Current permissions can include values such as Read and Read/write.
About the Assignee group
The current system-generated Assignee group limits access by assignment and ownership. Its Audit/Issue Access setting grants access only to issues the user owns or is assigned to. Open the group before relying on this behavior, because a user's other group memberships can add permissions.
Assign groups to a user
You can manage membership from either direction:
- From User Management > User, edit the user and move the appropriate entries from Available Groups to Selected Groups.
- From User Management > Group, edit the group and use the General tab to move users between the available and selected lists.
Important: Access changes can affect sensitive audit and issue data. Review every selected group and its current permissions before saving.