> ## Documentation Index
> Fetch the complete documentation index at: https://docs.iru.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Compliance Permissions

> Configure role-based access controls for Iru Compliance. Assign permissions to team members for frameworks, actions, evidence, and Trust Center.

### About Compliance Roles

Iru Compliance uses role-based access control. The [permissions overview](#permissions-overview) spells out what each role can open or change: search, actions, frameworks (controls and control-linked evidence), artifacts, sources, policies, Trust Center, and related areas. Behavior varies by role. In the tables, **Compliance Admin**, **Compliance Collaborator**, and **Compliance Auditor** sit next to **Admin**, **Standard**, and **Auditor** so you can compare Compliance-only assignments to the same permission pattern. Users with **Read activity logs** can review compliance and tenant activity on the [Unified Activity](/en/iru/platform-overview/unified-activity).

<Info>
  Need help with a step? [Contact Iru Support](/en/iru/iru-support/access-to-iru-support).
</Info>

### Access Levels

#### Admin

Full access to all compliance functionality, including framework management, settings configuration, and administrative controls.

#### Standard

Most of the same permissions as **Admin**, with limits on framework and settings management.

#### Help Desk

Operational access for day-to-day compliance work, including managing actions, artifacts, and evidence collection.

#### Secrets Auditor

Read-only access with the ability to generate automated artifacts and assess artifact relevance.

#### Auditor

Read-only access for audit and review. In the **Frameworks** matrix, **Auditor** does not have **View controls** (the control definitions in a framework) but does have **View control action** and **View control artifact**, so reviewers can still follow actions and evidence tied to controls without editing control definitions. See the matrix for the full list.

#### Iru Support

Read-only access to support customer issues and troubleshooting.

### Compliance-Only Roles

These roles apply **only** within Iru Compliance. The **Compliance Admin**, **Compliance Collaborator**, and **Compliance Auditor** columns match **Admin**, **Standard**, and **Auditor**; they do not grant access outside the Compliance area. For tenant-wide roles across Endpoint, Identity, and the rest of the platform, see [Team Member Role Permissions](/en/iru/access/team-member-role-permissions).

#### Compliance Admin

Administrator-level access in Iru Compliance only. Matches the **Admin** column in the [permissions overview](#permissions-overview). This is not tenant-wide **Administrator** access across products.

#### Compliance Collaborator

Matches the **Standard** column for team members whose access is limited to Iru Compliance.

#### Compliance Auditor

Matches the **Auditor** column for team members whose access is limited to Iru Compliance. Under **Frameworks**, **Compliance Auditor** behaves like **Auditor**: no **View controls**, with **View control action** and **View control artifact** for reviews.

### Permissions Overview

#### General

| Permission | Admin | Compliance Admin | Standard | Compliance Collaborator | Help Desk | Secrets Auditor | Auditor | Compliance Auditor | Iru Support |
| ---------- | ----- | ---------------- | -------- | ----------------------- | --------- | --------------- | ------- | ------------------ | ----------- |
| Search     | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ✅           |

#### Actions

| Permission                       | Admin | Compliance Admin | Standard | Compliance Collaborator | Help Desk | Secrets Auditor | Auditor | Compliance Auditor | Iru Support |
| -------------------------------- | ----- | ---------------- | -------- | ----------------------- | --------- | --------------- | ------- | ------------------ | ----------- |
| View list                        | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ✅           |
| View action details              | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ✅           |
| Create                           | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |
| Update                           | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ❌       | ❌                  | ❌           |
| Delete                           | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ❌       | ❌                  | ❌           |
| Upload artifact                  | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ❌       | ❌                  | ❌           |
| Delete artifact                  | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ❌       | ❌                  | ❌           |
| Generate automated artifact      | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ❌           |
| Generate automated artifact bulk | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ❌           |
| Assess artifact relevance        | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ❌           |
| Read comments                    | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ✅           |
| Create comment                   | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ❌           |
| Update comment                   | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ❌           |
| Delete comment                   | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ❌           |
| Read activity logs               | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ❌           |

#### Frameworks

| Permission               | Admin | Compliance Admin | Standard | Compliance Collaborator | Help Desk | Secrets Auditor | Auditor | Compliance Auditor | Iru Support |
| ------------------------ | ----- | ---------------- | -------- | ----------------------- | --------- | --------------- | ------- | ------------------ | ----------- |
| List frameworks          | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ✅           |
| View framework details   | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ✅           |
| View framework readiness | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ✅           |
| Add frameworks           | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |
| Remove frameworks        | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |
| View controls            | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ❌       | ❌                  | ❌           |
| Add controls             | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ❌       | ❌                  | ❌           |
| Edit control             | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |
| Remove controls          | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |
| View control action      | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ✅           |
| Add control action       | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |
| Edit control actions     | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ❌       | ❌                  | ❌           |
| Remove control action    | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |
| View control artifact    | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ✅           |
| Upload control artifact  | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ❌       | ❌                  | ❌           |
| Remove control artifact  | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ❌       | ❌                  | ❌           |

#### Artifacts

| Permission             | Admin | Compliance Admin | Standard | Compliance Collaborator | Help Desk | Secrets Auditor | Auditor | Compliance Auditor | Iru Support |
| ---------------------- | ----- | ---------------- | -------- | ----------------------- | --------- | --------------- | ------- | ------------------ | ----------- |
| View list of artifacts | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ✅           |
| View artifact details  | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ✅           |
| Edit artifact details  | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ❌       | ❌                  | ❌           |
| Upload artifact        | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ❌       | ❌                  | ❌           |
| Replace file           | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ❌       | ❌                  | ❌           |
| Remove artifact        | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ❌       | ❌                  | ❌           |

#### Sources

| Permission           | Admin | Compliance Admin | Standard | Compliance Collaborator | Help Desk | Secrets Auditor | Auditor | Compliance Auditor | Iru Support |
| -------------------- | ----- | ---------------- | -------- | ----------------------- | --------- | --------------- | ------- | ------------------ | ----------- |
| View list of sources | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ✅           |
| Connect source       | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ❌       | ❌                  | ❌           |
| Disconnect source    | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ❌       | ❌                  | ❌           |

#### Policies

Use **Compliance → Policies** to create, publish, and track acknowledgements for security and compliance policies. See [Policies Management](/en/compliance/policies-management) for the library, template generation, editor, and workforce acknowledgement flows.

| Capability                          | Admin | Compliance Admin | Standard | Compliance Collaborator | Help Desk | Secrets Auditor | Auditor | Compliance Auditor | Iru Support |
| ----------------------------------- | ----- | ---------------- | -------- | ----------------------- | --------- | --------------- | ------- | ------------------ | ----------- |
| View published policies             | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ✅           |
| Create and edit policies            | ✅     | ✅                | ✅        | ✅                       | ❌         | ❌               | ❌       | ❌                  | ❌           |
| Publish and delete policies         | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |
| Manage policy owners and categories | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |
| View acknowledgements (admin tab)   | ✅     | ✅                | ✅        | ✅                       | ❌         | ❌               | ✅       | ✅                  | ❌           |

**Standard** and **Compliance Collaborator** can create and edit draft policies but cannot publish or delete them, and cannot manage tenant-level policy settings such as owners and categories. **Auditor** and **Compliance Auditor** can view published policies and acknowledgement progress but cannot change policy content.

Workforce users are not Compliance administrators. When a policy is published, every user in the tenant sees assignments in **My Policies** and can acknowledge policies assigned to them. That portal is separate from the Compliance **Policies** admin view.

#### Trust Center: Editor

| Permission                  | Admin | Compliance Admin | Standard | Compliance Collaborator | Help Desk | Secrets Auditor | Auditor | Compliance Auditor | Iru Support |
| --------------------------- | ----- | ---------------- | -------- | ----------------------- | --------- | --------------- | ------- | ------------------ | ----------- |
| Read settings               | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ✅           |
| Create settings             | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |
| Update settings             | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |
| Upload logo                 | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |
| Remove logo                 | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |
| Upload NDA                  | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |
| Remove NDA                  | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |
| Read certifications         | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ✅           |
| Upload certification icon   | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |
| Delete custom certification | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |

#### Trust Center: Answers

| Permission              | Admin | Compliance Admin | Standard | Compliance Collaborator | Help Desk | Secrets Auditor | Auditor | Compliance Auditor | Iru Support |
| ----------------------- | ----- | ---------------- | -------- | ----------------------- | --------- | --------------- | ------- | ------------------ | ----------- |
| Read answers            | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ✅           |
| Update answers          | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |
| Delete answers          | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |
| Read answers category   | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ✅           |
| Create answers category | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |
| Update answers category | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |
| Delete answers category | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |

#### Trust Center: Artifacts

| Permission               | Admin | Compliance Admin | Standard | Compliance Collaborator | Help Desk | Secrets Auditor | Auditor | Compliance Auditor | Iru Support |
| ------------------------ | ----- | ---------------- | -------- | ----------------------- | --------- | --------------- | ------- | ------------------ | ----------- |
| Read document category   | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ✅           |
| Update document category | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |
| Delete document category | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |

#### Trust Center: Accounts

| Permission                  | Admin | Compliance Admin | Standard | Compliance Collaborator | Help Desk | Secrets Auditor | Auditor | Compliance Auditor | Iru Support |
| --------------------------- | ----- | ---------------- | -------- | ----------------------- | --------- | --------------- | ------- | ------------------ | ----------- |
| Read accounts               | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ✅           |
| Read pending accounts       | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ✅           |
| Get signed NDA download URL | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ✅           |
| Approve account             | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |
| Delete account              | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |

#### Trust Center: Questionnaires

| Permission                 | Admin | Compliance Admin | Standard | Compliance Collaborator | Help Desk | Secrets Auditor | Auditor | Compliance Auditor | Iru Support |
| -------------------------- | ----- | ---------------- | -------- | ----------------------- | --------- | --------------- | ------- | ------------------ | ----------- |
| Read questionnaire list    | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ✅           |
| Read questionnaire details | ✅     | ✅                | ✅        | ✅                       | ✅         | ✅               | ✅       | ✅                  | ✅           |
| Update questionnaire       | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |
| Add questionnaire          | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |
| Delete questionnaire       | ✅     | ✅                | ❌        | ❌                       | ❌         | ❌               | ❌       | ❌                  | ❌           |

### Common Permission Issues

Use this section when a control is missing or a button has no effect.

<AccordionGroup>
  <Accordion title="Cannot add or remove a framework">
    Only **Admin** or **Compliance Admin** can add or remove frameworks. **Standard**, **Compliance Collaborator**, and **Help Desk** cannot.
  </Accordion>

  <Accordion title="Cannot open control definitions as Auditor">
    The **Frameworks** matrix sets **View controls** to off for **Auditor** and **Compliance Auditor**, while **View control action** and **View control artifact** stay on so reviewers can follow actions and evidence without editing control definitions. This is expected.
  </Accordion>

  <Accordion title="Cannot edit a control’s definition">
    Only **Admin** or **Compliance Admin** can edit existing controls. Other roles may add controls or edit control actions only where the **Frameworks** matrix allows.
  </Accordion>

  <Accordion title="Cannot approve control update recommendations">
    Iru AI **Control Update** recommendations (from **Home** → **Insights**, **Frameworks**, or a framework detail page) require permission to approve or reject proposed control and action text. View-only roles may see that a recommendation exists but cannot act on it. See [Adaptive Compliance](/en/compliance/adaptive-compliance) for the review workflow and who can approve changes in your tenant.
  </Accordion>

  <Accordion title="Cannot connect or disconnect a source">
    **Auditor**, **Compliance Auditor**, and **Iru Support** cannot manage sources. Use **Admin**, **Compliance Admin**, **Standard**, **Compliance Collaborator**, or **Help Desk** as listed under **Sources**.
  </Accordion>

  <Accordion title="Cannot upload artifacts on an action">
    **Auditor** and **Compliance Auditor** are read-only for uploads. Use **Admin**, **Compliance Admin**, **Standard**, **Compliance Collaborator**, **Help Desk**, or **Secrets Auditor** as allowed in the **Actions** table.
  </Accordion>

  <Accordion title="Cannot publish or delete a policy">
    Only **Admin** or **Compliance Admin** can publish or delete policies and manage policy owners and categories. **Standard** and **Compliance Collaborator** can create and edit drafts. See the **Policies** table and [Policies Management](/en/compliance/policies-management).
  </Accordion>

  <Accordion title="Cannot change Trust Center branding, Answers, or questionnaires">
    Trust Center **Editor**, **Answers**, and **Questionnaires** changes are **Admin** or **Compliance Admin** only unless the matrix shows otherwise.
  </Accordion>
</AccordionGroup>

If controls or actions look wrong for your access level, open the **Access** page to confirm your role ([**Account Menu Button**](/en/iru/platform-overview/account-menu) → **Access**).

## Related Articles

<CardGroup cols={2}>
  <Card title="Getting Started With Compliance" icon="rocket" href="/en/compliance/getting-started-with-compliance">
    Core concepts and what you can do in Compliance.
  </Card>

  <Card title="Policies Management" icon="file-lines" href="/en/compliance/policies-management">
    Policy library, publishing, and acknowledgements.
  </Card>

  <Card title="Frameworks Management" icon="layer-group" href="/en/compliance/frameworks-management">
    Who can add or change frameworks by role.
  </Card>

  <Card title="Adaptive Compliance" icon="sparkles" href="/en/compliance/adaptive-compliance">
    Approving or rejecting Iru AI control and action updates.
  </Card>

  <Card title="Trust Center Management" icon="globe" href="/en/compliance/trust-center/trust-center-management">
    External sharing and Trust Center permissions.
  </Card>

  <Card title="Team Member Role Permissions" icon="users" href="/en/iru/access/team-member-role-permissions">
    Tenant-wide roles in Iru (alongside the Compliance roles on this page).
  </Card>
</CardGroup>