Open Admin → Settings. Configuration is grouped into General, Preferences, and Lookups. Most pages use a single Save settings button at the bottom; lookup list pages (categories, scales, and so on) save each item independently.
| Setting area | What you configure |
|---|---|
| General | Application name, procedure document URL |
| Appearance | Theme mode, color scheme, layout, hide SharePoint chrome |
| Dashboard | Dashboard name, dynamic naming, heat-map drill-down, financial exposure card |
| Dropdown Options | Choice values for risk form dropdowns (status is managed under Risk Status & Priority) |
| Forms | Field visibility, labels, and required flags per entity (Risk, Business, Project) |
| Form Templates | Category-linked extra fields on the create / edit risk forms |
| Risk Status & Priority | Custom statuses (with workflow buckets) and custom priority labels |
| Compliance | Enable or disable frameworks; create custom frameworks |
| Subscription | 14-day trial and yearly subscription, when enabled for your deployment |
| App Administrators | Users who can open Settings; at least one is required; removal requires confirmation |
| Numbering | Automatic Risk ID and project code formats |
| Tags | Colored tags for risk categorization (click Save settings to persist) |
| Notification Workflows | Email events: created, assigned, overdue, closed, and more |
| Workflow Rules | Trigger / condition / action rules (executed via Power Automate when configured) |
| Email Templates | Reusable HTML templates with merge variables |
| Scheduled Reports | Report schedules (delivery requires an automation integration) |
| Lookup lists | Categories, sub-categories, likelihood, consequence, profile types, response, strategy |
| Audit Log | Searchable log of create / update / delete actions across the application |

8.1 Custom Statuses and Sidebar Views
- Open Settings → Risk Status & Priority.
- On the Custom Statuses tab, click Add Status. Enter a name, a color, and a Counts as bucket (Open, In Progress, Mitigation, Resolved, or Closed).
- Switch to the Custom Priorities tab to add organizational priority labels (separate from matrix priority on the risk form).
- Click Save settings. Status names sync to the SharePoint Riskstatus field.
Sidebar views (Open, In Progress, Closed, Overdue, and so on) group risks by status bucket and due dates. Matrix priority (Critical, Major, Moderate, Low) is calculated from Likelihood × Impact using the Likelihood and Consequence scales — never from custom priority labels.

8.2 Form Templates (Administrator)
- Open Settings → Form Templates and click New form template.
- Enter a name and link the template to a Risk Category.
- Add fields (text, dropdown, date, people picker, currency, and more) and optional template tabs for long forms.
- Save the template and ensure it is marked Active.
When a user selects the linked category on a risk form, the template fields appear below the main tabs.
8.3 Lookup Lists (Administrator)
The Lookups section of Settings manages master data: Risk Categories, Sub-Categories, Likelihood Scale, Consequence Scale, Risk Profile Types, Response Strategies, and Risk Strategies. Each list supports Add new, Edit, and Delete. Deleting shows a confirmation dialog; if other records reference the lookup value, the dialog lists the affected lists and offers Delete anyway.

8.4 Email Notifications (Mail.Send)
- Deploy risk-management.sppkg, then approve Microsoft Graph Mail.Send (see Section 1.2.1).
- Configure events under Settings → Notification Workflows.
- Customize message bodies under Settings → Email Templates using merge variables such as {RiskID}, {Title}, {Status}, {AssignedTo}, and {RiskUrl}.
| Mailbox requirement Users who save risks must have an Exchange Online mailbox; mail is sent from the signed-in user’s mailbox. |
|---|

8.5 Appearance and Layout
- Open Settings → Appearance.
- Choose the Theme mode: Light, Dark, or Follow system.
- Adjust the accent color and optional custom header background, if your branding policy allows.
- Enable Hide SharePoint chrome for a full-app experience on SharePoint pages (not available in Teams).
- Enable Show user profile pill so users still see their signed-in identity when chrome is hidden.
- Click Save settings and refresh the page to apply layout changes.
8.6 Numbering and Risk IDs
Settings → Numbering controls auto-generated Risk IDs and project codes. A typical format uses a prefix (for example, Risk-) plus a zero-padded sequence. New risks receive the next ID on save. Changing the numbering format does not retroactively rename existing items.
8.7 Audit Log
Settings → Audit Log records create, update, and delete actions performed through the web part and the form customizer. Search by user, entity type, or date range. Use it alongside SharePoint version history on individual risk items for full traceability.