Roles and Permissions

Users in Touchpoints have varying levels of permissions:

1. At the top level, there is the Admin role, which is limited to members of the Touchpoints team.
2. Still at the global level, there are some roles that grant a user permissions over all resources of a certain type. Resource types are, for instance, Forms, Services, Websites, etc.
3. Users and resources each belong to a single Organization. There are some roles that grant a user permissions over all resources of a certain type that belong to the user's Organization.
4. At the lowest level, users can have various roles per-resource (exp. Form Manager, Website Contact).

How roles are granted

1. Global and per-organization roles can only be assigned by a Touchpoints Admin. If you need such a role, request it by sending an email to feedback-analytics@gsa.gov.
2. Per-resource roles can generally be granted by non-Admin users who have the necessary global, per-organization or per-resource roles.

Roles by resource type

Roles that span all resources

• Admin - global, access to all aspects of Touchpoints System

Roles related to Forms and their Responses

• Form Manager - per-resource, access to all aspects of a form and its responses
• Response Viewer - per-resource, read-only access to a form and its responses
• Organizational Data Admin - per-organization, has API access to all form responses for all forms that belong to the organization (eg: CDO/CTO/CIOs, for FOIA purposes)
• Organizational Form Approver - per-organization, responsible for approving all forms that belong to an organization

Roles related to the Digital Registry

• Registry Manager - global, can manage all mobile products and social media accounts
• Organizational Website Manager - per-organization, can edit all Website records for an organization
• Website Contact - per-resource, can edit the record for a Website
• Mobile Product Contact - per-resource, can edit the record for a Mobile Product
• Social Media Account Contact - per-resource, can edit the record for a Social Media Account

Roles related to Services

• Service Manager - global, can manage everything under /admin/service_providers and /admin/services
• Service Contact - per-resource, can edit the record for a Service

Roles related to Data Collections & Performance

• Performance Manager - global, can manage everything under /admin/performance