Role-based access
Role-based access that fits how your org actually works
Granular permissions are the difference between a tool you can roll out and one that gets stuck in a security review. Ongo Audit gives you team-scoped roles with fine-grained permissions over forms, assignments, submissions, incidents, and alerts, so HQ, managers, and field workers each see exactly what they should.
Permissions
HQ Mgr Field Forms Reports Settings
What you get
Everything in this feature.
- Custom roles per team with per-feature permission toggles
- Permissions cover forms, assignments, submissions, incidents, corrective actions, alerts
- Org-wide and team-level scoping so a regional manager only sees their region
- Multi-tenant by design — every query is siloed by organization automatically
- Activity logs across mutations for compliance audit trails
How it works
The flow, in plain terms.
- 1
Define the roles you need (e.g., HQ admin, regional manager, shift lead, inspector) and pick the permissions for each.
- 2
Assign people to teams with one of those roles. The same person can have different roles in different teams.
- 3
Every action runs through middleware that checks the role and team scope, so a manager in Region A never sees Region B data.