• How do I deactivate a user who authenticates through AD if I cannot do it from the Admin view?

  User accounts that authenticate through Active Directory (AD) cannot be deactivated from the Admin view. To deactivate an AD-authenticated user, please contact Granite Customer Support and request that the user account be deactivated on your behalf.Few readers

• How can I create new roles?

  You can create roles through System Admin view only if you have permission to manage roles. Creating a role that grants basic view access (including the ability to create new forms in a tool): Navigate to System Admin → Roles → Add New Role. Enter a clear name and description for the role. Under Basic View Permissions, click Add Permission. Configure the permission: Select the module (tool) to which the role applies. In Organization / Asset, select the assFew readers

• How do I add Target Assets or modify the tool's Target Structure?

  You can add and edit the tool's target structure as follows: Go to the Admin view, open the Assets tab, and locate the target asset under which you want to add a new target. To add a new target: Select "Add New Asset" by right-clicking on the target under which the new target will be created. Enter a name for the new Asset. Add the required tools by right-clicking on the newly added target and selecting Add Tool. From the drop-down menu that opens, select the toolFew readers

• What should I do if creating a new user fails because the email address is already in use?

  The system does not allow multiple users to have the same email address. If an account with that email address already exists, creating a new user will be blocked. Follow these steps: Check whether the account already exists Open the Users tab in the Admin section of Granite. Search for the user in the user list using their email address. If it is the same person Do not create a new account. Instead, add or modify the necessary roles and permissions on the existing accouFew readers

• How do I create view-only or guest accounts for external users?

  External users, such as auditors or inspectors, should be provided with manually created user accounts that have limited viewing permissions. Creating an account for an external user Create a manual user account for the person in the Users tab under Admin view. This requires administrator privileges, which provide access to the Admin section. Assign the user a role that grants read-only access to the tools (no editing permissions). You can review the permissions included inFew readers

• How do I add a new Assessment to the Risk Assessment Tool?

  A new assessment unit (asset) is added through the Assets view, while risks themselves are added within the asset's own assessment view. Step-by-step instructions: Open Admin view in Granite and navigate to the Assets tab. Locate the asset under which you want to add a new assessment unit. Right-click the asset and select Add New Asset. Enter a name for the new asset. Right-click the newly created asset and select the tool from the Add Tool menu in which you wantFew readers

• How do I remove users from the system?

  If you are using SSO/SCIM provisioning (e.g., AD/Azure AD): Remove or passivate the user in your organization's identity provider (IdP). SCIM synchronization will automatically deactivate the account in Granite. A passivated user will no longer appear in Granite's end-user views (such as training completion reports or form assignee selections). However, the user profile and audit trail are retained for auditing purposes. This is intentional. If a user removed from AD does not disappearFew readers

• How do I add new users to the system?

  The method for adding users depends on your organization's configuration. First, find out whether you are using Azure AD/SSO provisioning (automatic) or manual user accounts. If Azure AD/SSO is enabled (automatic provisioning): Add the user to your organization's Azure AD and grant them access to the application (for example, through an Enterprise Application, security groups, or SCIM provisioning). Ask the user to sign in to the system once using the designated SSO sign-iFew readers

• What should I do if an Asset was accidentally created under the wrong Parent Asset?

  If an asset was accidentally created under the wrong parent asset, follow these steps: Go to the Admin view by clicking your name and selecting Admin. On the Assets tab, locate the asset you want to move. Click and hold the left mouse button on the asset, then drag and drop it under the desired parent asset. Note: Moving an asset under another asset may require updates to user access roles and permissions. If the moved target disappears from view after the move, please coFew readers

• How do I assign access roles to users?

  You can assign access roles to users through the Admin view, provided that you have admin user privileges. Basic Steps: First, determine which tool or module (e.g., ERM, Audit, Work Risks) the role is needed for, which asset, area, or organizational unit the role should apply to and what level of access is required (read-only, read and edit, or admin). Open Admin view by clicking your name in the top-right corner and selecting Admin. Then navigaFew readers