Roles and Permissions

SNA Toolbox operates using a role-based access control (RBAC) model. Only registered and invited individuals can access the system dashboard. These individuals are referred to as Project Users. Access to projects is granted through an invitation process and is controlled by assigned project roles.

---

Project Users

Project Users are registered users who access the SNA Toolbox dashboard to configure, manage, analyse, and report on projects.

Key Principles

• A user must be invited to access the platform.
• A user must be assigned a role within a project to access it.
• Without a role assignment, the user cannot see or access the project.
• A user can hold different roles across different projects.
• Within a single project, a user can hold only one role.
• Access is always project-scoped.

caution

Users cannot access data or features outside their assigned projects.

---

Roles and Permissions

SNA Toolbox includes six predefined project roles:

• ProjectAdmin (PA)
• DesignManager (DM)
• DataOwner (DO)
• ProjectOperator (PO)
• DataAnalyst (DA)
• ReportViewer (RV)

Each role is designed to support specific responsibilities while protecting sensitive data and maintaining separation of duties.

note

Who is a Service Provider? A professional not affiliated with the customer's company, but associated with either the SNA Toolbox organisation or intermediary package providers.

Who is an End-user? An individual employed by the customer's company who actively utilises the provided packages.

ProjectAdmin (PA)

Capabilities	Limitations
Full access to all project modules, data, and functionalities	Cannot access other projects without explicit membership. Must still be explicitly assigned to a project (no automatic access to all projects).
Manage project settings
Invite and manage project users (including assigning roles)

DesignManager (DM)

Capabilities	Limitations
Focuses on the design aspect of the project and establishing its infrastructure.	Lacks the privilege to access or manage data collected from surveys or other data collection methods.
Responsible for creating and designing surveys, network widgets, and reports.	If data is required for design purposes, fake data must be used — not real data.
Can add other users to the project.

DataOwner (DO)

Capabilities	Limitations
Can manage all non-design elements of the project.	Lacks the capability to design or modify survey questions, network widgets, or reports.
Responsible for adding and managing project nodes and respondents.	When accessing User Management, cannot add or promote roles to ProjectAdmin or DesignManager.
Manages the survey process, including publishing, starting, stopping, pausing, and resuming.
Configures survey scheduling settings.
Has access to all project data and can view all reports.
Can add users as DataOwner, ReportViewer, ProjectOperator, or DataAnalyst, and can modify existing user roles to any of these positions.

ProjectOperator (PO)

Capabilities	Limitations
Can add and manage project nodes and respondents.	Does not have access to project data.
Manages the survey process, including publishing, starting, stopping, pausing, and resuming.	Lacks design capabilities for surveys, network widgets, or reports.
Configures survey scheduling settings.	Cannot view reports.

DataAnalyst (DA)

Capabilities	Limitations
Extracts insights from collected data.	Cannot alter any aspect of the project, surveys, or reports.
Can view nodes, survey responses, and network analytics data.	Does not have permission to add or manage project users or nodes.
Can create and edit network widgets and interact with designed reports.	Cannot start, stop, pause, or resume surveys.

ReportViewer (RV)

Capabilities	Limitations
Primary responsibility is to view and read shared reports on the platform.	Cannot access or manage project data.
	Lacks the capability to design or modify surveys, network widgets, or reports.

---

Permissions Reference

The table below lists all available permissions and which roles they are granted to.

Resource	Category	ID	Permission	PA	DM	DO	PO	DA	RV
Project	Project	2	UpdateProjectSettings	✔	✔	✔	✔
		3	DeleteProject	✔
		4	ManageProjectTag	✔	✔	✔	✔
		5	DeleteProjectTag	✔	✔	✔	✔
		6	ManageProjectUsers	✔		✔
		7	AccessProjectData	✔		✔		✔
Survey	General	8	CreateSurvey	✔	✔
		9	ReadSurveysList	✔	✔	✔	✔	✔
		10	DeleteSurvey	✔	✔
		11	ReadSpecificSurvey	✔	✔	✔	✔	✔
		12	ManipulateSurveyTitle	✔	✔	✔	✔
	Question	13	ReadSurveyQuestions	✔	✔	✔	✔	✔
		14	ManipulateSurveyQuestions	✔	✔
	Status	15	ManageSurveyStatus	✔		✔	✔
	Participant	16	ReadSurveyParticipants	✔		✔	✔
		17	ManipulateSurveyParticipants	✔		✔	✔
	Analytics	18	ManipulateSurveyAnalytics	✔	✔	✔
	Profile	19	ReadSurveyProfile	✔	✔	✔	✔
		20	ManipulateSurveyProfile	✔	✔	✔	✔
	Audit	21	ReadSurveyAuditParticipants	✔		✔	✔	✔
		22	ReadSurveyAuditAdmin	✔
	Export	23	AccessSurveyData	✔		✔		✔
	Instance	24	ChangeSurveyInstanceStatus	✔		✔	✔
	Notifications	25	ManageSurveyNotifications	✔		✔	✔
	Rules	26	ReadSurveyRules	✔	✔	✔
		27	ManipulateSurveyRules	✔		✔
	Report	28	ReadSurveyReport	✔	✔	✔
		29	ManipulateSurveyReport	✔	✔
	Settings	30	ReadSurveySettings	✔	✔	✔	✔
		31	ManipulateSurveySettings	✔	✔	✔	✔
	Tag	32	ManageSurveyTag	✔	✔	✔	✔
Widget	General	33	CreateWidget	✔	✔			✔
		34	UpdateWidget	✔	✔			✔
		35	ReadWidgetList	✔	✔			✔
		36	DeleteWidget	✔	✔			✔
		37	ReadSpecificWidget	✔	✔			✔
	Tag	38	ManageWidgetTag	✔	✔			✔
	Analytics	39	UpdateWidgetAnalytics	✔	✔			✔
Node	General	40	ReadNodeList	✔		✔	✔	✔
		41	CreateNode	✔		✔	✔
		42	UpdateNode	✔		✔	✔
		43	DeleteNode	✔		✔	✔
		44	ReadSpecificNode	✔		✔	✔	✔
		45	ReadNodeRelations	✔		✔		✔
	Node Note	46	AddNodeNote	✔		✔	✔
		47	DeleteNodeNotes	✔		✔	✔
	NodeRespondent	48	ManageRespondent	✔		✔	✔
Report	General	49	ReadReportList	✔	✔	✔		✔	✔
		50	CreateReport	✔	✔
		51	UpdateReport	✔	✔
		52	ReadSpecificReport	✔	✔	✔		✔	✔
		53	DeleteReport	✔	✔
	Share	54	ManageReportAccess	✔	✔	✔
	Tag	55	ManageReportTag	✔	✔	✔

---

Survey Participants

Survey Participants provide data through surveys but do not access the platform directly. They:

• Do not require registration.
• Do not log in to the system.
• Receive survey links with secure tokens.

note

Survey Participants interact only with surveys and do not have access to the platform dashboard.