Does your organisation have a documented Access Control Policy? How are administrator accounts authorised and managed?
Yes, you may request a copy of our Access Control Policy from customers@commonplace.is
We conduct access reviews quarterly, biannually or annually depending on the system.
Customer users on the Commonplace platform are assigned roles and permissions as is described here:
Lead admins 🔧 👑
Lead admins can build and edit their website, manage user access, control data and communications, and make changes to project settings and branding elements.
Admins 🔧
Admins can build and edit their website, manage user access, control data and communications, and make changes to project settings and branding elements, but they cannot delete lead admin users.
Communications managers 💬
Communications managers are responsible for publishing news, creating and managing content for report generation purposes (e.g. closing the loop report), changing branding elements, and grouping and emailing respondents and contributions.
Data analysts 📊
Data analysts have access to the dashboard and can explore or export the data. Data analysts can’t access edit mode, create projects nor manage their settings.
Surveyors 📋
Surveyors are responsible for logging survey answers but do not have permission to edit, create, delete content, send communications, or manage other user roles.
Testers 🔍
Testers can be invited to ensure the functionality and user experience of a website before launch, without the permission to access the dashboard, manage user roles, create/edit/delete content and pages, or change branding elements.
Stakeholders 👤
This is a different type of user role, created specifically for individuals who you want to invite to take part in your consultation as members of a closed audience.