🔐 ANVL Permissions Model
Level | Level Name | Level Description |
Role | ADMIN | Grants access to ANVL Web (ANVL Manager) to review site and organizational data, dashboards, reports, and completed workflows. Does not allow configuration, publishing, or user governance. |
Role | TECH | Grants access to ANVL Workflows (ANVL Mobile) to complete workflows and capture field data. Does not allow review, reporting, or administrative actions. |
Special Right | Admin Portal | Grants access to the ANVL Admin Portal for organization-level administration, including user management, Group setup, role assignment, Special Rights governance, and bulk actions. |
Special Right | Workflow Management – Create | Allows creation of new workflows using Mobilize AI. Does not allow editing or publishing existing workflows. |
Special Right | Workflow Management – Edit | Allows editing of existing workflow templates in Editor. Does not allow publishing changes. |
Special Right | Workflow Management – View | Allows view-only access to workflow templates without edit or publish capabilities. |
Special Right | Workflow Management – Delete Draft | Allows deletion of unpublished workflow drafts across the organization. Applies globally, not at the site level. |
Special Right | Workflow Management – Publish (UAT) | Allows publishing workflows to Testing (UAT) Groups only. No Production impact. |
Special Right | Workflow Management – Publish (All) | Allows publishing workflows to Production Groups. Changes take immediate operational effect and should be granted sparingly. |
Special Right | Insights AI | Grants access to Risk Insights dashboards to analyze safety trends and performance metrics across permitted Groups. |
Account-Level Setting | Can Modify User | Allows site-level user management in ANVL Manager, including adding, modifying, activating, and inactivating users within assigned Groups. Does not grant Admin Portal access. |
Account-Level Setting | Hidden User | Allows technical or support access without operational visibility. User is hidden from assignments, live feeds, and supervisor lists but retains system access. |