How do I assign access roles to users?

Basic Steps:

• First, determine which tool or module (e.g., ERM, Audit, Work Risks) the role is needed for, which asset, area, or organizational unit the role should apply to and what level of access is required (read-only, read and edit, or admin).
• Open Admin view by clicking your name in the top-right corner and selecting Admin. Then navigate to Roles.
• Locate the role you want to assign to the user.
• Click Users on the right side of the role. In the Add this role to users field, search for the user you want to assign the role to. Once you have selected the desired user(s), click Add Selected Users.
• Ask the user to verify that they can access the functions and content associated with the new role. If the user was logged into the system while the role was assigned, ask them to log out and log back in for the changes to take effect.

If the role does not exist yet:

• Contact Granite Support to have the role created, or follow your organization's internal procedures for creating new roles.

Troubleshooting:

• I can't find the role: The role may not exist yet, or you may not have permission to manage it. Contact Granite Support to add the role to the list of assignable roles or to create the role if it does not already exist.
• The role does not provide access to the required assets or features: Verify that you assigned the correct role or combination of roles.
• The user cannot see the changes: Ask the user to log out and log back in. If the issue persists, contact Granite Support.

Note about externally managed roles:

• Some roles may be assigned centrally through Microsoft Entra ID, Azure AD, or other directory services. In these cases, the role is not assigned within the Granite system. Instead, access must be requested according to your organization's procedures, typically through the IT department.

Updated on: 20/10/2026