| Role template or responsibility | Administration guidance |
|---|---|
| CFO | Review broad business, finance and approval permissions before organisation-wide assignment. This template can be powerful. |
| Finance Lead | Review finance maintenance permissions separately from final approvals and deletion. |
| Manager | Choose the appropriate unit/programme/record scope; do not substitute an organisation-wide grant for missing responsibility data. |
| Team Lead | Use the necessary contribution and deliverable/evidence scope. |
| Reviewer | Restrict to the intended read/report scope. |
| Compliance or Risk Officer | Configure an appropriate role if no suitable template exists. Job titles alone confer no permission. |
| GRC Administrator | Organisation access configuration and business administration; review recovery access separately. |
Inspect actual role permissions in this installation. A recovery administrator retains broad business access; adding a narrow scoped role does not remove that recovery authority.