Roles & Permissions allows administrators to control what users can do across Warrant OS by assigning permissions based on their responsibilities. This helps ensure users have access only to the features they need while supporting a secure and efficient review process.
With Roles & Permissions, you can create custom roles, assign them to users or groups, and manage access across your organization from a single location.
Note: Roles & Permissions is an optional feature. Your organization's existing access settings remain unchanged until capability permissions are enabled.
Access Roles & Permissions
To access Roles & Permissions:
From the left navigation menu, select Company.
Click Roles & Permissions.
From this page, you can configure permission settings, create roles, and manage role assignments.
Configure permission policies
At the top of the page are two organization-wide settings that control how permissions are enforced.
Separation of duties (Maker-Checker)
When enabled, users cannot approve assets they submitted themselves. If a user is assigned both Submit and Approve capabilities, a written rationale is required. Any administrator override must also include a justification.
This helps support independent review processes and strengthens compliance controls.
Enforce capability permissions
When enabled, users can perform only the capabilities granted through their assigned roles. Any capability that has not been assigned is automatically denied.
If this setting is disabled, your organization's existing access behavior remains unchanged.
Create a role
Roles are made up of capabilities that determine what users can do throughout Warrant OS.
Available capabilities include:
Capability | Allows users to... |
View | View assets and compliance results. |
Scan | Run compliance scans on assets. |
Review | Review and comment on assets during approvals. |
Create / Upload | Create or upload assets. |
Submit | Submit assets for approval. |
Approve | Approve assets and appear in the approver picker. |
Admin | Manage roles, permissions, and organization settings. |
To create a role:
Click New role.
Enter a name for the role.
Add a description.
Save the role.
The Roles table provides a permission matrix, making it easy to compare the capabilities assigned to each role.
Assign a role
Roles can be assigned to individual users or groups.
To assign a role:
In the Assignments section, click Assign role.
Select the user or group.
Choose the role you want to assign.
If prompted, provide a rationale.
Save the assignment.
Users who belong to a group automatically inherit the roles assigned to that group.
Ready-to-use role templates
Warrant includes four ready-to-use role templates to help you get started:
Submitter – Can view assets and run compliance scans.
Proofreader – Can view assets and review content during approvals.
LOB Reviewer – Can view, scan, review, and approve assets.
Compliance Admin – Has access to all available capabilities.
You can use these roles as they are or create additional custom roles to fit your organization's workflow.
Export an access review
To download a report of your organization's current role assignments, click Export access review in the Assignments section.
The report is exported as a CSV file and can be used for periodic access reviews or compliance audits.
Review role assignments
The Assignments section provides a complete view of role assignments across your organization.
From here, you can:
View existing role assignments.
Assign additional roles.
Remove role assignments.
Export an access review for auditing or record-keeping.
How Roles & Permissions affects users
When capability permissions are enabled, users only have access to the actions included in their assigned roles.
Depending on their permissions, some actions may be hidden or unavailable throughout Warrant OS. For example, only users with approval permissions can be selected as approvers, and users without permission to create, upload, scan, or submit assets won't see those actions available.