| Term | Meaning in avowr |
|---|---|
| Organisation | The application workspace and data boundary; distinct from a business unit inside it |
| Tenant | Microsoft identity/deployment context; configured mapping connects it to the application organisation |
| Role | A collection of permitted actions |
| Assignment | A role granted to a person/group within a responsibility scope |
| Responsibility scope | Organisation, unit, programme or supported named record to which a grant applies |
| Owner | Person responsible for maintaining a record; ownership alone does not grant access |
| Business unit label | Descriptive record data; separate from formal hierarchy/access assignments |
| Internal person | Directory record for someone associated with the organisation, with or without sign-in access |
| Sign-in account | The application identity used to authenticate and receive permissions |
| External contact | A directory person associated with an outside organisation or acting independently |
| Nominated contact | Recorded relationship to an internal person; not a permission grant |
| Credential | A person's licence, certificate or check with evidence, dates and renewal versions |
| Registration | An entry in the registration/certification register, including organisational or facility registrations |
| Contract | A commercial/governance record with review and signature lifecycle |
| Funding agreement | A funding administration record with schedules, allocations, deliverables and approval |
| Register record | An entry in a configurable register type, distinct from specialised contract/agreement records |
| Variation | Proposed change under a contract/agreement; approved changes affect the parent's calculated result |
| Obligation | A commitment with a due date, owner and completion/waiver lifecycle; may recur |
| Task | An action used to deliver work; completing it does not necessarily complete its parent obligation |
| Control | A measure intended to manage a risk or meet a requirement |
| Control test | A dated assessment of a control's operation with result and evidence |
| Inherent residual and target risk | Exposure before controls, recorded remaining exposure, and the intended future position |
| Appetite | Configured tolerance threshold used in risk summaries |
| Framework | Versioned collection of requirements and optional maturity definitions |
| Coverage | Active control links to requirements; different from effectiveness or certification |
| Maturity | Recorded assessment against a defined level within a framework version |
| Evidence | File or record supporting an assertion, completion or decision |
| Workflow state | Stage reached through supported actions and guards |
| Currency | Whether relevant dates/evidence are current, due or overdue; can differ from workflow state |
| Audit trail | Recorded actors, changes and transitions; retained separately from editable business facts |
| Compliance sweep | Configured job that processes date-driven conditions; not proof of notification delivery |
| Document intelligence | Extraction and retrieval of permitted source passages and review suggestions |
| GRC Administrator | Organisation administration role, including access configuration |
| Recovery administrator | Approved broad business-access account maintained for recovery; review separately from scoped roles |
| SOP | Standard operating procedure: who does a task, when, how and how to verify its result |
Use the getting started guide for navigation or troubleshooting for a specific problem.