How the eComms permissions model works

For Compliance Administrators and Compliance Officers.

Every user in eComms has a role that defines what they can do in the system. But for Supervisors, role alone does not determine which alerts and messages they can access — that is determined by their supervision configuration. Two Supervisors with identical roles may see entirely different content in the Inbox and Archive depending on how supervision has been set up.

Access to alerts and messages follows the same underlying model whether the content is in the Inbox (eComms Review) or the Archive (eComms Review and eComms Keep). However, the way that model is applied differs between alerts and messages in one important respect: alerts carry a single group tag and access is strictly scoped to that tag, while messages can carry multiple group tags and are accessible to Supervisors of any of those groups.

The Admin role is the account superuser. Admins can view and act on all alerts and messages in the system regardless of which User Groups are involved. No additional supervision configuration is required. Every account must have at least one Admin.

Supervisors can be assigned directly to one or more User Groups in Settings. A Supervisor assigned to a User Group can view and act on alerts and messages tagged with that specific group — and only that group. They have no visibility into content tagged with groups they are not assigned to.

Some alerts and messages involve participants who do not belong to any User Group. Admins can designate specific Supervisors to have purview over this content using the Supervisors for Users not in a Group setting in Account Defaults. This setting also covers historical content — communications captured at a time when a participant had no group assignment, even if they have since been added to one.

Supervisors designated under this setting can view alerts tagged with the account-level scope, and messages where at least one participant has no User Group assignment. This designation does not grant access to alerts or messages tagged with a specific User Group.

If no Supervisors are designated under this setting, only Admins can access ungrouped content.

User Groups are optional. When no User Groups are configured, all content is ungrouped by definition. In that case, access to all alerts and messages is limited to Admins and any Supervisors designated under the Supervisors for Users not in a Group setting.

When User Groups are configured, alerts and messages are tagged based on the groups relevant to their participants. The tags on that content determine which Supervisors can see it.