About roles best practices

The development, the maintenance, and the administration of a Control Compliance Suite environment encompass several different roles, each with distinct responsibilities. To assign users and groups to a role requires skillful balance. Roles are not designed to completely solve the permission problem or the task problem. Roles create a possible solution.

The following are the general guidelines:

• Give a limited number of users full control.

• Give users the minimum access they require.

• When possible, assign the same role to multiple users or groups.

• When possible, assign roles to groups rather than to individual users.