Roles
Every user in Better Comply has exactly one role. The role controls which sidebar items are visible, which pages can be accessed, and which actions are available within those pages. Roles cannot be self-assigned; an administrator sets them.
Everyone. Use this page to understand what your role grants access to, or as an administrator to decide which role is appropriate for a new user.
For the complete permissions matrix (which specific actions each role can perform), see Reference.
The five roles
Employee
The most common role. An Employee can:
- View and complete their own assigned trainings
- Sign completions electronically when the training requires it
- Download their own completion certificates
- View their personal training history
Employees cannot see other users' data, the dashboard, or any administrative pages.
Typical users: All staff who need to complete compliance trainings - including shop-floor and warehouse operators using kiosk accounts.
Home page: My Trainings
Team Lead
A supervisor role. A Team Lead has all Employee capabilities plus:
- View the training status of their direct reports (both foreman-managed and line-lead-managed workers)
- Send reminder notifications to team members with pending or overdue trainings
- Access the Reports page scoped to their own team
Team Leads receive a weekly digest email summarizing their team's overdue and due-soon trainings.
Typical users: Department managers, shift supervisors, foremen, and line leads.
Home page: My Team
Foreman and line lead - two supervisor relationships
A worker can have two supervisors at the same time:
- A foreman (the classic direct-line manager, stored as the worker's manager)
- A line lead (the supervisor responsible for the worker's production line)
Both relationships appear in the supervisor's team view and weekly digest. The two-tier model fits manufacturing environments where a person reports to both a shift foreman and a production-line lead. An administrator configures both relationships on the user's profile.
Quality Admin
An administrator role focused on compliance and quality assurance. A Quality Admin can do everything a Team Lead can, plus:
- View the organization-wide Dashboard
- Create and manage Campaigns and Onboarding rules
- Author and manage Training Materials (including AI-assisted drafting)
- Govern Controlled Documents through the full QMS lifecycle
- Approve training versions in the Quality Review Queue (applying segregation-of-duties: the author cannot be the approver)
- Approve and sign controlled documents
- View and export the Audit log
- Invite and manage users
Quality Admins can access the Quality Review Queue. They are subject to segregation-of-duties enforcement: they cannot approve content they authored themselves.
Typical users: Quality assurance managers, compliance officers.
Home page: Dashboard
HR Admin
An administrator role focused on people and training compliance. HR Admins have identical permissions to Quality Admins, but are typically used for HR managers and training coordinators whose primary concern is personnel-level training completion rather than QMS document governance.
Typical users: HR managers, training coordinators.
Home page: Dashboard
HR Admins can view the Quality Review Queue entries, but they cannot approve training versions (that is restricted to Quality Admin and Corporate Admin roles, who are the designated quality reviewers).
Corporate Admin
The superuser role. A Corporate Admin has all Quality Admin and HR Admin capabilities plus:
- Access to the Dev Tools page (system-level configuration and demo data tools)
- Approving training versions in the Quality Review Queue
- Organization-level settings
Typical users: IT administrators, system owners.
Home page: Dashboard
Role summary table
| Capability | Employee | Team Lead | Quality Admin | HR Admin | Corporate Admin |
|---|---|---|---|---|---|
| Complete own trainings | Yes | Yes | Yes | Yes | Yes |
| View own certificates | Yes | Yes | Yes | Yes | Yes |
| View team status | - | Yes | Yes | Yes | Yes |
| Send reminders | - | Yes | Yes | Yes | Yes |
| Dashboard | - | - | Yes | Yes | Yes |
| Campaigns and Onboarding | - | - | Yes | Yes | Yes |
| Training Materials authoring | - | - | Yes | Yes | Yes |
| Controlled Documents lifecycle | - | - | Yes | Yes | Yes |
| Quality Review Queue | - | - | Yes | - | Yes |
| Approve training versions | - | - | Yes | - | Yes |
| Audit log | - | - | Yes | Yes | Yes |
| Users management | - | - | Yes | Yes | Yes |
| Dev Tools | - | - | - | - | Yes |
How roles are assigned
Roles are set by administrators when creating or editing a user account:
- Email-based users are invited via the Users page. The invitation form includes a role selector.
- Emailless (kiosk) users are created via the Users page with an employee number and PIN. The role is set at creation.
Users cannot change their own role. If you need a different level of access, contact your system administrator.
Every role change is recorded in the audit log with the administrator who made the change and the timestamp.
Related pages
- Navigation - which sidebar items each role sees
- Signing in - including the kiosk (employee number) sign-in path
- Users and access - how administrators create and manage users
- Reference - the full permissions matrix