Skip to main content
Quick summary
  • A person’s permission level sets what they can do in Assuric, and everyone has exactly one.
  • Only an Admin can add people or change a person’s permission level.
  • An Admin can require multi-factor authentication for a whole permission level, not for a single role.

​
Permission levels

Authorisation, what someone can do once signed in, is their permission level: everyone has exactly one, set when you add them. Only an Admin can add people or change someone’s level. Some screens use other names:
  • The People table’s Permissions column shows View-only as Viewer.
  • The People table’s filter shows User as Editor.
  • The multi-factor authentication setting shows Staff portal only as Staff Portal.
To give an auditor access, use View-only. Who can edit a specific document is set in that document’s Permissions.

​
The person sheet

Click anyone on the People tab to open their sheet.
A person sheet showing the Edit button in the header and the Permissions and Access section with Permission level Admin, Account status Added and two Authentication icons

A person's sheet. 1 Edit changes their name, title, groups, roles and permission level in one form. 2 Permissions & Access shows their permission level, account status and sign-in methods.

Authentication shows an icon per sign-in method:
  • The envelope is Email verification.
  • The phone is Authenticator app enrolled. It’s orange when an authenticator app is required and they haven’t set one up yet.

​
Change someone’s permission level

1

Open their Permissions & Access

Open their sheet, then click the pencil on Permissions & Access.
2

Pick a level and save

Choose the new level and click Update Permissions.
The Change Permissions dialog for paul@assuric.com listing Staff portal only under No workspace access, and View-only, User and Admin under Workspace access, with the Update Permissions button highlighted

The Change Permissions dialog, with Admin selected. 1 Update Permissions saves the new level.

​
Sign-in and multi-factor authentication

Authentication is how someone proves who they are, and it’s passwordless: a link and code sent to their email, or their Google account. Our team can set up single sign-on (SSO) with another identity provider. See Navigating Assuric for the sign-in flow. Multi-factor authentication adds an authenticator app to sign-in:
  • Each person sets up their own from their account menu (their initial, top right): Authentication → Account Security.
  • An Admin can require it per permission level, not per role, from Settings → Authentication in the sidebar.
What we recommendGive each person the lowest level their work needs. Most staff and contractors only need Staff portal only.

Authentication

The workspace sign-in and multi-factor authentication settings.

Roles and groups

What gets assigned to someone, as opposed to what they can do.

Inviting people

Adding someone and setting their level as you invite them.