Roles and permissions
Distinguish Console roles, Portal roles, data scope, and privacy settings.
| Role | Workspace and access |
|---|---|
| Facilitator | Console authoring and collection within the assigned scope. Global-scope facilitators can manage users. |
| Admin | Console administration and the broadest assessment scope within the training-partner account. |
| Viewer | Read-only Console access within the assigned scope. |
| Client admin | Organisation Portal access and its training-partner data-access setting. |
| Client viewer | Read-only access to the organisation's Portal data. |
Assessment scope
A team account can see every assessment, only the assessments it created, or only selected assessments. An admin sees every assessment. The Console invitation dialog sets the role only; to limit someone to certain assessments, ask your Datatrap administrator or use the API.
Ask your Datatrap administrator to configure narrower access when needed. Portal accounts are tied to their own client organisation. A rater's personal link grants their campaign tasks, not a Console or Portal role.
User management
An admin or global-scope facilitator can invite Console teammates and manage client Portal accounts. The current Portal does not have a user-management screen, even for client admins. Use Manage users and access for the supported Console workflow.
Separate controls
An API key or connector scope does not replace a user's role. Organisation privacy settings and 360 anonymity rules are also separate controls. See Data access and privacy and Run a 360 campaign before making a confidentiality promise.