Platform-wide48 permissions

Organization Admin

Governs org users, the role catalog, and studies with read-only clinical oversight.

What this role can do

Withdraw a participant, with a reason
Decide which fields require source verification
Design case report forms
Create studies
Configure studies
Upload and version study documents
Run data exports
Independently verify the audit trail

Boundaries (segregation of duties)

Cannot enter or correct clinical data
Cannot sign anything
Cannot perform source verification — only plan it

Exact permissions

The real permissions this role carries, taken from the platform’s own catalogue. Holding a permission is necessary but not sufficient — access is further narrowed by study membership, site, and whether the study’s data is test or live.

Admin

org.audit.readAccess the organization audit trail
org.readView the organization and its team
org.manageManage organization settings and user provisioning
user.manageInvite / suspend / impersonate users
rbac.manageManage roles, policies, permissions
system.monitorView system health and queues
user.directory.readBrowse the organization user directory (for team staffing)

Studies

study.readView study details and dashboards
study.writeEdit study settings and teams
study.createCreate a new study
study.state.changeHold, resume, close to enrollment and complete a study
study.lockLock and unlock the study database (two different people, each with an e-signature)
study.archiveArchive / retire a study (soft-delete)

Versioning

study.version.readView the study's versions: the version list, UAT cycles, sign-offs and the changes between versions
study.amendment.startStart an amendment (the next version of a Live study)
study.version.submit_uatSubmit a version in Build to UAT (freezes its design and opens a UAT cycle)
study.uat.close_cyclePass or fail the open UAT cycle (a failed cycle returns the version to Build)
study.uat_issue.readView the issues and results of a UAT cycle (what testers found, and what became of it)
study.uat_issue.writeRaise, edit, resolve, accept and reopen the issues of the open UAT cycle
study.version.go_liveTake an approved version Live (supersedes the version that was Live)
study.version.withdrawWithdraw a version that has not gone Live

Sites

site.readView site details
site.writeCreate / edit sites and staff
site.activateActivate a registered site
site.transitionTransition site lifecycle (suspend / resume / close)

Monitoring

sdv.configureDefine the SDV / risk-based targeting plan (which fields require source verification)

Subjects

subject.readView subject data
subject.deleteWithdraw / archive subjects

Safety

clinical.event.readRead a subject’s events and the adverse event and SAE logs

Visits

visit.readView visit schedule and data

Forms

form.readOpen forms and view answers
form.designEdit form templates in builder
form.publishPublish form versions to live
form.freezeMarks a role as data-locking authority (separation of duties: cannot also enter data)

Workflow

workflow.designBuild and edit workflows

Queries

clinical.query.readView queries

Audit

audit.readAccess audit trail
audit.verifyVerify the audit-trail hash chain

Exports

export.readView export history
export.runTrigger ad-hoc and signed exports

Team

team.assignAssign / provision a study team role
team.manageSuspend / resume / retire team assignments
team.training_completeMark a team member as protocol-training complete

Library

library.writeCreate / edit shared library forms

ai.generateGenerate or edit forms with AI

Documents

document.readView, download, and preview study documents
document.writeUpload documents, add versions, edit metadata
document.manageApprove and archive study documents

Set up your organization Build a study Roles and permissions Compare in the Permission Explorer →

Next role Project Manager