Configuring Level 2 User Access Settings
When a new Third-Party Screening & Monitoring user profile is assigned to Level 2 in the NAVEX One Platform, additional settings for third-party information and report-related actions are displayed. Admin and Level 1 users can edit these settings after the profile is created. Each setting is described below.
Note: Available settings may vary based on your Third-Party Screening & Monitoring system configuration.
Apply a User Template
You can apply an existing User Template to automatically assign user access and restrictions. Selecting this action will disable the remaining options. For instructions on creating a template, see User Templates.
If you proceed without a user template and select Yes for any of the next four questions, the Save button changes to Next. Click Next to configure the selected restrictions.
Restrict Reports User Can Order
Note: New report definitions are available to all users except those with existing report restrictions. Users restricted from ordering certain reports cannot order the new report type.
This setting controls whether the user can order reports and which reports they are permitted to order. By default, a new user does not have restrictions on which reports can be ordered, but they cannot add external analyst activity items to report requests. This means:
-
The user can order most report types, including the ESG due diligence reports for Climate Risk, Human Rights, and Sustainability Risk.
-
The user cannot order EDD, IDD, and OSI reports.
To specify which reports the user can order:
- For Do you want to restrict which reports this user can order?, select Yes.
- Select Next.
-
Select individual reports that the user can request, or select the This user may not request any reports check box.
Note: Restricting a report type does not affect the user's ability to view existing reports of that type in the Reports page.
- Select Next or Save.
Restrict Assessments User Can Send
This setting controls whether the user can send ad-hoc assessments, and which assessments they are permitted to send.
To specify which assessments the user can send:
-
For Do you want to restrict which assessments this user can send?, select Yes.
-
Select Next.
-
Select individual assessments that the user can send, or select the This user may not send any assessments check box.
Allow User to Add External Analysis Activities
This setting controls whether the user can add external analysis activities, such as an analyst review or enhanced due diligence, to a report.
To change this setting:
- For Is this user allowed to add any external analysis activities to a report?, select Yes.
- Select Next.
- Select individual external analysis activities that the user can add to a report, or click the Select All check box to include all available external analysis activities.
- Select Next or Save.
Limit User's Access to Third Party Information
This setting controls how the user's access to third parties is restricted, whether by role, third party attribute, or both. Select Yes, and then click Next to add restrictions. For details on the criteria for limiting access, see Limit Level 2 User Access to Third Parties.
Allow User to Upload Reports
This setting controls whether the user can upload reports. Select Yes to enable the user to upload reports for accessible third parties.
Allow User to Mark Reputation Alerts as False Positives
This setting controls whether the user can mark reputation alerts as false positives. Select Yes to enable the user to mark false positives for accessible third parties' reputation alerts.
Note: If your organization has the Unreviewed Screening Reports feature enabled, this option is unavailable.