Skip to main content

Create and manage roles and permissions

Review the seven default roles, create custom roles, set Role Assignment Restrictions, and see which default role holds each permission.

A role is a set of permissions. Every user has one on the platform, and one in each study they join, so the role decides what they can see and do. Datacapt ships with seven default roles; when none of them fits, you create your own.

🔑 Prerequisite: Roles (Edit) permission to create or edit roles. By default, only the ADMIN role has it.


Know where a role applies

A user holds roles at two levels:

  • Platform role: set when you invite the user. It controls the global settings (users, centers, templates, audit trails) and is the default role when this user joins a study.

  • Study role: set in each study. It controls what the user can do inside that study, and can differ from one study to the next.

Both levels use the same list of roles, managed in Settings › Roles.


Review the default roles

Seven roles exist on every platform: ADMIN, PROJECT_MANAGER, DATA_MANAGER, INVESTIGATOR, MONITOR, AUDITOR and MAIN_INVESTIGATOR. You can open them to read their permissions, but you cannot change them: only custom roles can be edited.

[Screenshot to add: settings-roles-monitor-ecrf-permissions.png, the MONITOR role open on the eCRF block]

🛠️ Step by step guide

  1. Go to Settings › Roles.

  2. Open the role you want to review.

  3. Expand a permission block, for example eCRF. Each feature is listed with its description and its actions. A green dot means the action is granted; an empty circle means it is not.

The full list of what each default role can do is in Default permissions at a glance, at the end of this article.


Create a custom role

Create a custom role when a default role grants too much or too little, for example a Clinical Research Associate who raises queries but never edits data.

[Screenshot to add: settings-roles-add-new-role.png, the Add new role window]

🛠️ Step by step guide

  1. Go to Settings › Roles.

  2. Select Add new role.

  3. Enter the Role name and select Submit. The role is created with every permission turned off.

  4. Open the new role and select Edit.

  5. Expand each permission block and turn on the actions this role needs.

  6. Select Save.

To change a custom role later, open it, select Edit, change the permissions and select Save. Changes apply immediately to every user who holds this role, in every study.

💡 Tip: to check what a role really sees, invite yourself a second time with an email alias, such as yourname+monitor@yourcompany.com, give that account the role, and log in with it in a private browser window. Since role changes apply immediately, reload the private window after each change to see the result.


Restrict which roles a user can assign

A user who can invite or edit users can also choose their role. The Role Assignment Restrictions block limits that choice, so that, for example, a project manager can invite investigators and monitors but cannot make anyone an administrator.

[Screenshot to add: settings-roles-assignment-restrictions.png, the Role Assignment Restrictions block]

🛠️ Step by step guide

  1. Go to Settings › Roles and open a custom role.

  2. Select Edit.

  3. In Role Assignment Restrictions, select the roles this role is allowed to assign.

  4. Select Save.

Users with this role can then assign only the selected roles. By default, only ADMIN can give another user the ADMIN role; the six other default roles can assign every role except ADMIN.


Default permissions at a glance

This table lists every permission, grouped as on the role page, with the default roles that hold each action. ADMIN holds every permission and is not repeated in the table.

Abbreviations: PM = PROJECT_MANAGER, DM = DATA_MANAGER, Inv = INVESTIGATOR, Mon = MONITOR, Aud = AUDITOR, MI = MAIN_INVESTIGATOR.

Feature

Action: also granted by default to

GLOBAL SETTINGS

Global Users Management

Access: Aud
​Invite: ADMIN only
​Edit: ADMIN only
​Delete: ADMIN only
​Unlock: ADMIN only
​Lock: ADMIN only
​Invite to all studies: ADMIN only

General settings

Edit: ADMIN only

Privacy

Edit: ADMIN only

Roles

Edit: ADMIN only

Centers

Access: Aud, MI
​Edit: MI

Templates

Access: DM, MI
​Delete: DM, MI

Audit trails

Access: Aud
​Export: Aud

API credentials

Access: ADMIN only

Customization

Edit: ADMIN only

Recruitment settings

Edit: ADMIN only

Medical dictionaries

Access: ADMIN only
​Edit: ADMIN only

Participant statuses

Edit: ADMIN only

STUDY

Study list

Add: PM, DM, MI

Draft study

Access all: DM, MI

STUDY ADD-ONS

Participant status

Edit: PM, Inv, MI

Analytics

Access: PM, DM, Inv, Mon, MI
​Edit: PM, DM, MI
​Export: PM, DM, Inv, MI

Document management

Access: PM, DM, Inv, Mon, Aud, MI
​Upload: PM, DM, Inv, Mon, MI
​Delete: PM, DM, Inv, Mon, MI
​Edit: PM, DM, MI

Subject management

Access: PM, Inv, MI
​Add: PM, Inv, MI
​Edit: PM, Inv, MI

Translations

Access: PM, DM, MI
​Edit: PM, DM, MI

Study audit trails

Access: PM, DM, Inv, Mon, Aud, MI
​Export: Mon, Aud, MI

Automation

Access: PM, DM, Inv, MI

Study user management

Access: PM, Aud, MI
​Invite: PM, MI
​Edit: ADMIN only
​Delete: PM, MI

Study settings

Edit: PM, DM, MI

Randomization configuration

Access: PM, DM, MI
​Edit: PM, DM, MI
​Delete: PM, DM, MI

Randomization list

Access: ADMIN only
​Edit: ADMIN only
​Unblind access: ADMIN only

Kit inventory

Access: ADMIN only
​View kit type: ADMIN only
​View subject ID: ADMIN only
​Edit: ADMIN only

Allocation configuration

Access: ADMIN only
​Edit: ADMIN only

Allocation

Add: ADMIN only
​Edit: ADMIN only

Coding mappings

Access: PM, DM, MI
​Edit: PM, DM, MI

Medical coding coder

Access: PM, DM, MI
​Edit: PM, DM, MI

Side-by-side

Access: ADMIN only

ECRF

eCRF Builder

Edit: DM, MI

eCRF Record List

Access: PM, DM, Inv, Mon, Aud, MI
​Add: DM, Inv, MI
​Archive: PM, DM, Inv, MI
​Export: PM, DM, Inv, Aud, MI

eCRF Records

Access: PM, DM, Inv, Mon, Aud, MI
​Edit: DM, Inv, MI
​Add Queries: DM, Mon, MI
​Resolve Queries: DM, Inv, Mon, MI
​Close Queries: DM, Mon, MI
​Sign: DM, Inv, MI
​Lock: Mon, MI
​Exclude: DM, Inv, MI
​Review: Inv, Mon, MI
​SDV: Inv, Mon, MI
​Emergency unblind: MI

eCRF files

Export: PM, DM, Inv, MI

Monitoring

Access: PM, DM, Inv, Mon, Aud, MI

EPRO

ePRO dashboard

Access: PM, DM, Inv, Mon, Aud, MI
​Add: PM, DM, MI

ePRO record list

Access: PM, DM, Inv, Mon, Aud, MI
​Archive: PM, Inv, MI
​Add: PM, Inv, MI
​Export: PM, DM, Inv, MI
​Generate link: DM, Inv, MI
​Edit: Inv, MI

ePRO builder

Edit: PM, DM, MI

ePRO settings

Access: PM, DM, MI

ePRO files

Export: PM, DM, Inv, MI

ECONSENT

eConsent dashboard

Access: PM, DM, Inv, Mon, Aud, MI
​Add: Inv, MI
​Archive: PM, DM, Inv, MI
​Export: MI

eConsent signature

Access: PM, Inv, Mon, MI
​Sign: Inv, MI

eConsent builder

Edit: DM, MI

ECONSULT

eConsult

Access: Inv, MI

ANALYSIS

Data analysis

Access: PM, DM, Inv, Aud, MI
​Upload: PM, Inv, MI
​Refresh: PM, Inv, MI
​Export: PM, DM, Inv, Aud, MI

SUBJECT DATABASE MANAGEMENT

Subject repository

Access: ADMIN only
​Add: ADMIN only
​Edit: ADMIN only
​Answer: ADMIN only
​Basic settings: ADMIN only

Repository builder

Access: ADMIN only

Repository campaigns

Add: ADMIN only

Repository actions

Import: ADMIN only
​Export: ADMIN only
​Bulk delete: ADMIN only
​Delete: ADMIN only

RECRUITMENT

Recruitment

Access: ADMIN only
​Add: ADMIN only
​Edit: ADMIN only

Recruitment builder

Edit: ADMIN only

Recruitment records

Invite: ADMIN only
​Export: ADMIN only

PAYMENTS

Payments

Access: ADMIN only
​Edit: ADMIN only
​Export: ADMIN only

Payment orders

Access: ADMIN only
​Edit: ADMIN only
​Export: ADMIN only

CALENDAR

Calendar

Access: ADMIN only
​Add: ADMIN only
​Edit: ADMIN only
​Delete: ADMIN only

Visit

Update: ADMIN only

REPORTS

Reports

Access: ADMIN only
​Edit: ADMIN only

Good to know

  • ADMIN holds everything. It is granted every permission, including the ones added in future releases.

  • Some modules are ADMIN-only by default: Subject Database Management, Recruitment, Calendar, Payments, Reports, Side-by-side, Randomization list, Kit inventory and Allocation. To open them to other users, create a custom role.

  • Draft study (Access all) grants every permission inside any study still in draft. This is why DATA_MANAGER and MAIN_INVESTIGATOR can build a study before it goes live.


Frequently asked questions

Can I duplicate a role?

No. To start from an existing role, create a new one and turn on the same permissions.

Can I edit a default role?

No. The seven default roles are view-only. Create a custom role with the permissions you need instead.


👉🏻 Next step

Did this answer your question?