Use this reference for the real site. Or means either role is sufficient for the named action. Plus means the same person needs both the role and the additional authority. A requirement for another person is stated separately. Accounts grants and the local site assignment must both allow the role.
Recent authentication means completing the Accounts second factor within the last five minutes. Ordinary sign-in checks still apply to the other rows. Current site state, commercial admission, record revisions and any active holds can also refuse an otherwise permitted action.
Plus dataset grants means current read permission for every dataset involved in the record or operation. Product roles do not supply those grants. Case assignment and an old downloaded report do not add current permission.
Choose the task and authority
| Task | Who | Additional conditions | Related guide |
|---|---|---|---|
| Prepare site access and local assignments | Owner | Recent authentication for sensitive access changes. Administration alone does not reveal source evidence. | Procedure |
| Declare a new dataset | Supervisor plus dataset grants | Recent authentication. The creator needs current grants for every existing site dataset before adding another, and declares source identity, coverage and authority. | Procedure |
| Change declared dataset readers | Supervisor plus permission for that dataset | Recent authentication. Reader removal restricts disclosure; granting a reader still does not grant a product role. | Procedure |
| Upload and review a declared file | Supervisor plus permission for that dataset | Uploading requires recent authentication. Use the supported strict source envelope, exact dataset and current review. Website intake does not accept raw CSV. | Procedure |
| Accept the exact reviewed file | Supervisor plus permission for that dataset | Recent authentication, current file/review/dependency checks and retained source coverage. Acceptance creates local evidence, not source-system actions. | Procedure |
| Save a new bounded investigation | Operator or Supervisor, plus dataset grants | Choose exact seed identity, datasets, relationship meaning, direction and view. A missing or partial result retains its limitations. | Procedure |
| Read saved investigations and downloads | Author or Reviewer or Supervisor or Operator or Viewer, plus dataset grants | Current rights to the whole saved scope are rechecked, including old results and files. | Procedure |
| Approve or withdraw a same-identity link | Supervisor plus grants for both datasets | Recent authentication and exact same-kind identity pair with supporting evidence. This is identity review, not proof of a physical relationship. | Procedure |
| Admit a source correction or withdrawal | Supervisor plus permission for the affected dataset | Use explicit source notices and the appropriate reviewed intake. Omission is not deletion; replacement can remain pending. | Procedure |
| Create, add to, assign or decide a local case | Supervisor plus grants for its complete dataset scope | Recent authentication. Assignee must be a current eligible Supervisor with the full scope; assignment grants nothing. | Procedure |
| Read a case | Author or Reviewer or Supervisor or Operator or Viewer, plus dataset grants | The complete union of attached datasets is required. A lost grant can withhold the entire case and history. | Procedure |
| Reopen a closed case or expand its scope | Supervisor plus grants for the complete resulting scope | Recent authentication and current new-work admission. Closed cases must be reopened before notes or attachments. | Procedure |
| Create a policy draft from a saved investigation | Author plus dataset grants | Recent authentication. Create policy draft copies the exact saved query; authoring continues through Open in Automation when connected. | Procedure |
| Review policy expectations or a whole release | Reviewer plus dataset grants | Recent authentication and independence from the relevant contributors. Case review and release review each enforce that exclusion. | Procedure |
| Activate a reviewed investigation policy | Reviewer plus dataset grants | Recent authentication, exact approved evidence, current dependencies and expected assignment. Native activation cannot bypass contributor exclusion. | Procedure |
| Restrict a dataset or withdraw a local identity decision | Supervisor plus the applicable dataset authority | Use its protective control and required current verification. This restricts local disclosure or interpretation, without recalling stock or placing source-system holds. | Procedure |
| Prepare and download retained-record export | Owner or Supervisor, plus current grants for every included dataset | Recent authentication at both stages. Unavailable or held source scope refuses disclosure; Owner is not an unrestricted export role. | Procedure |
| Drain, close or record technical recovery review | Owner | Recent authentication and exact current lifecycle state. Technical administration adds no evidence grants or source-product authority. | Procedure |
| Append an investigation note | Supervisor plus grants for the run’s complete dataset scope | Up to 500 Unicode characters without control characters. This records a local observation without changing source evidence or the saved result. | Procedure |
Decide who receives an investigation
Give the receiving person its exact saved run or case reference and dataset list before sharing conclusions. A recipient may need an appropriate LotTrail working role and explicit grants; changing the case assignee cannot fix missing disclosure authority. The worked lot shows how to hand over a partial investigation and a later correction without inferring missing material relationships.