Security and Permissions

TrialGrid manages permissions by Organization Team, URL Teams and by Project Roles.

If you look after your Organization's users and roles, start with the Administrator Guide.

Organization Level Permissions

What a user may do in an Organization is decided by the Organization Role they hold. A user whose role has the "Administer Permissions" permission can choose the role held by anyone in that Organization, on the Organization Team page.

Administering permissions does not give a user the other permissions. Someone who administers permissions and also needs, say, to delete URLs holds a role that has both.

URL Level Permissions

At the URL level each user may be assigned permissions to manage URL level objects: see URL Teams.

New users will not have any URL level permissions enabled by default.

Project Level Permissions

Users who have access to a URL can view all Projects, unless the Project default setting of 'View All' has been disabled.

Users can be assigned a Project Role to give them permissions within a Project. Roles can be assigned when the Project is created or later from the Project Team page.

Sessions

TrialGrid logs a user out after an hour without activity. A warning is shown a few minutes before.
Sessions are also set to end when the browser closes, though some browsers restore them.
If support@trialgrid.com has turned on the new location email for your Organization, users are emailed when their account signs in from somewhere it has not been used recently.

See also Changing your Password for password rules and account lockout, and Two Factor Authentication.