Product / Knowledge Base / 11. Security and Roles

11. Security and Roles

User & Administration Guide — Version 1.0.0.26

Guide summary

Site owners and up to 40 app administrators can open Settings. Application roles (HR / Admin, Manager, Employee) control navigation. SharePoint remains the data boundary.

On this page

Who can open Settings

Site owners and up to 40 named app administrators (users or SharePoint groups) can open Settings. Content rights stay with SharePoint. Admin must keep Settings and Security access.

Application roles

  • HR / Admin — full access, including Settings, Cycles, command center, and calibration.
  • Manager — reviews, board, team reports, and facilitation as granted on the matrix.
  • Employee — My dashboard, own goals and reviews. Cannot open Settings.

These roles are separate from SharePoint site groups. A direct assignment wins over a group. The permission matrix controls which features each role may use.

Item-level permissions

Reviews, PIP, and 360 rows use item-level permissions so only the employee, reviewer, and HR roles that should see the packet can open it. Anonymity for 360 is applied in the service layer.

Hidden lists

Operational lists use the PM_ prefix and are hidden from site contents search. Uninstalling the app leaves lists and data intact.