Skip to main content

Understanding roles and access

Learn how roles and Business Unit access work together to control what users can do and see in Altruistiq. Understand the two-part access model that defines every user's permissions and data visibility.

Updated over a month ago

Two components control what each user can do in Altruistiq: their role and their Business Unit access. Together, these determine both the actions a user can take and the data they can see.

The two-part access model

Every user's access is defined by two settings that work together:

  1. Roles define what actions a user can take. Each user has exactly one role, which grants permissions for specific activities such as uploading data, editing products, managing team members, or creating workbooks. Think of your role as your job function within the platform.

  2. Business Unit access defines which data a user can see. Each user has access to one or more Business Units, which controls the Facilities, Input Data, and analytics results visible to them. Think of Business Unit access as your data scope.

When you combine these two settings, you get a user's effective access. A user can only perform actions their role allows, and only on data within their Business Unit access.

How this works in practice

Consider an organisation with Business Units for Europe, North America, and Asia-Pacific. You invite your European sustainability team with access only to the Europe Business Unit. They can perform all the actions their role allows, but they'll only see European data in their workbooks and can only upload data to European Facilities.

This means you could have two users with the same role but very different data visibility, or two users seeing the same data but with different capabilities based on their roles.

Roles available to your organisation

AQ Advanced roles

AQ Advanced includes eight specialised roles designed for different functions within your sustainability programme:

Role

License type

Sustainability Administrator

Pro

Platform Administrator

Lite

Measurement & Reporting Professional

Pro

Supply Chain Engagement Professional

Pro

Sustainability Contributor

Lite

Measurement Contributor

Lite

Supply Chain Engagement Contributor

Lite

External Partner

Pro

Legacy tiers

Other tiers include three core roles that cover the essential functions:

Role

License type

Sustainability Administrator

Pro

Sustainability Contributor

Lite

External Partner

Pro

Each role's license type (Pro or Lite) may affect billing. See "Role definitions and capabilities" for full details on what each role can do.

Who can manage roles and access

Only users with the "Manage User Roles & Business Unit Access" permission can change another user's role or Business Unit access. By default, this permission is held by:

  • Sustainability Administrator

  • Platform Administrator


What's next

Now that you understand how the two-part access model works, you can:

  • Review "Role definitions and capabilities" to understand what each role can do

  • Read "How Business Unit access works" for more detail on data visibility

  • Go to "Navigate the Manage Users page" to learn where you manage your team

Did this answer your question?