User Role Enhancement – Read-Only Contractor Compliance Access
Summary

Introduce a new read-only Contractor Management permission or user role that allows users to view contractor information and compliance without the ability to edit or manage contractor records.

Business Need

Many organisations have Contractor Management User Roles (Global, limited, manager or coordinator), reception staff, security personnel, and compliance teams who only need to verify whether a contractor is compliant before granting site access.

Currently, users must be assigned a Contractor Manager role (Administrator, Manager, or Coordinator) to access Contractor Management. However, all of these roles include the ability to make changes to contractor records within their permitted scope.

There is no option to grant users view-only access.

Proposed Enhancement

Introduce a new permission or user role (for example, Contractor Viewer, Contractor Read-Only, or a similar permission under User Roles) that would allow users to:

View contractor profiles.
View contractor compliance status.
View police clearances and certifications.
View contractor organisations.
Search and filter contractor records.
View contractor history and reporting (where permitted).

The role should not allow users to:

Edit contractor or organisation details.
Delete contractor profiles.
Update or remove certifications or police clearances.
Change contractor status or access.
Assign Organisation Owners.
Perform any administrative or management actions.
Business Benefits

This would allow organisations to separate operational visibility from administrative responsibility.

Site Hosts and security personnel could quickly verify whether a contractor is approved to enter a site without being given permissions that allow them to modify contractor records.

This would:

Improve governance and security.
Reduce the risk of accidental or unauthorised changes.
Better support organisations with strict compliance and auditing requirements.
Provide greater flexibility when assigning user permissions.
Use Case

Staff that needs this kind of Access or User Role only need to check whether contractors are compliant before allowing them access to site. At present, we must assign a Contractor Manager role, which also grants editing capabilities.

A dedicated read-only permission or user role would allow staff to perform their day-to-day responsibilities while ensuring only authorised users can modify contractor information and compliance records.

Reference Case:
07289496