User Roles and Permissions in e-ISuite

User Roles

Privileged Roles Privileged roles allow the user to manage user accounts and perform database management (Site) in e-ISuite, but do not allow access to other functionality The most common privileged role is the Account Manager There are differences in the Account Manager role in Enterprise versus Site User Accounts for Enterprise are managed though NAP; the Account Manager has limited management capabilities In Site, the Account Manager has database management capabilities as well as creating and managing user accounts

Account Manager - Enterprise Add User Accounts to e-ISuite from NAP Privileged and Non-Privileged Remove a User Account from Enterprise this does not affect the NAP account Enable or Disable a User Account Add or remove User Account Roles Auditing User Sessions View logged in users; disconnect logged in users

Account Manager Site DATABASE MANAGEMENT USER ACCOUNTS Create a new database Create/Edit User Accounts Privileged and Non-Privileged Edit Database Add or Delete User Account Roles Copy Database Back-up a Site database Enable/Disable User Accounts Manual Import/Export User Accounts Automatic Reset User Account password Restore a Site database Remove Database

Non-Privileged Roles Non-privileged roles allow access to the functional areas within the application (i.e. Time, IAP, Check-in) Should be assigned according to the duties the user is expected to perform (least access approach) In Enterprise, the roles assigned to a user account stay with that user account when they are added to an Incident (however, they can be changed as needed) NOTE: Regardless of roles, a User Account created in Site does NOT allow access to Enterprise; a NAP account does NOT allow access to Site

Data Steward Enterprise and Site Enterprise Only Incidents create, edit, delete Incident Groups add, edit, delete Add users Accounting Codes Edit users Set up Accrual Accounting Codes Add users from a User Group Reference Data incidents User Groups Data Transfer Add users Financial Export Edit users Add User Group to Incident or Incident Group ROSS Import upload ROSS files, import ROSS files

Common Functionality for Check-in/Demob, Time and Cost View Incidents Add/Edit Resources View/Edit Common Data for Resources Custom Reports Resource Inventory (Enterprise Only)

Check-in/Demob Check-in Data Demob Data Demob Resources Populate demob forms and reports Plans Reports Generate Glidepath spreadsheet

Incident Action Plan (IAP) Create, edit, copy, lock, delete, print an IAP Entire IAP Individual forms Set up IAP form defaults ICS 203/204 Templates Master Frequency List Settings Options Incident Resources View only Copy, add, delete external .pdf attachments

Time Add / Edit / Delete Time Data Employment Type and Rates where applicable Time worked Adjustments Contractor Data Agreement Data Admin Payment Office Non-Standard data only Time Reports OF-288 and OF-286 Invoice; other Time reports

Cost Cost Reports Add/Edit/Delete Incident Costs Create/Update/Delete Projections Run costs Accruals Lock costs Run cost accruals Set flow down Extract cost accruals Enter Other Costs Finalize cost accruals View cost accruals Update Incident Cost Rates Assign Accrual Accounting Codes Add/Edit/Delete Cost Groups

Training Specialist Track incident trainee data and assignments Track Evaluator data and evaluation of trainees Provide all forms, reports and statistics Trainee Data Form Evaluation Record Performance Evaluation Home Unit Letter Exit Interview Trainee Assignment List Incident Training Summary Daily Trainee Count

Other Privileged Roles (assigned as approved) Geographic Rates Manager - Enterprise Geographic Cost rates Global Reference Data Manager - Enterprise Global Cost rates Geographic Cost rates Global Reference Data Help Desk Decrypt Database passwords Allow Account Manager Reset Generate Site Access Key