Supervision Roles
The following supervision roles are available in Safous:
- Approver:
- Users with the Approver role can approve or deny requests that require administrative approval. This role ensures that only authorized changes or actions are executed. Approvers can also revoke access and provide reasons for approving, denying, or revoking access.
- Active Supervisor:
- Active Supervisors have comprehensive oversight capabilities. They can interactively manage and monitor system activities, making real-time decisions to maintain security and operational efficiency. Approvers can also revoke access and provide reasons for approving, denying, or revoking access.
- Observer Supervisor:
- Observer Supervisors have read-only access to supervision logs and activities. They can observe and review system activities without the rights to make any changes, ensuring transparency and accountability.
- Auditor:
- Auditors have access to playback recordings. Auditors cannot access applications or playback recordings unless explicitly permitted by application rules. Auditor assignments operate retroactively, enabling users who are assigned as auditors to applications to access historical recordings of the application. The Record Session option must be enabled in Action profiles onPolicies > Actions to be able to record application sessions.
note
- Approvers and supervisors can navigate from the Applications Portal to the Supervisor page to fulfil their respective roles.
- Approvers and supervisors cannot access applications unless their identities are explicitly granted access by an application rule.