📝User Permissions

Brightest user roles and permission levels

There are 8 types of user roles in Brightest, each with different permission, access, edit, and visibility levels:

Role	Capabilities
Administrator	Has all administrator privileges. Admins are the super-users of your Brightest account. Admins can invite other users and manage their permissions, handling billing and administrative details, and access and edit any part of Brightest. Use those powers wisely
Manager	Managers have most of the same permissions as Admins, but managers don't have the ability to invite and edit user permissions for other team members on the account. Managers also can't set up and perform financial-related account activity. Otherwise, managers have full access to create, edit, update, upload, and delete data and actions in your Brightest account
Analyst	Analyst is a read-only role. Analysts can view all the data in Brightest, but they can't edit, change or delete anything
Data Collaborator	Data collaborators are designed to be members of your broader organization who are responsible for providing or collecting data around specific assets or KPIs. For example, data collaborators can be designated as managers of one or more sustainability assets (like an office or factory), and then upload data related to those sites. Data collaborators could also be members of your finance team (like controllers), HR, or other departments. Similarly, admins and managers can also share specific KPIs and ESG questions with data collaborators. Overall, data collaborators only have access to the assets, KPIs, questions, tasks, and requests assigned to them, otherwise they cannot view the rest of your Brightest account. If you would like to give your data collaborators access to more of the Sustainability Module, learn more about customizable data collaborator access configuration below.
HR	Designed for HR managers or equivalent roles to support with social data collection, KPI tracking, collaboration, and reporting. This role provides targeted permissions for social- and employee-related data, tasks, and workflows. HR members have access to: the Social Dashboard, Policies and Documents, "Social" materiality topics (if enabled), Actions, Surveys, Tasks, shared ESG reporting sections and questions, and CSR & Impact (if enabled)
Communications	The communications role is designed for editing and reviewing public-facing information, like ESG reports, sustainability disclosures, and other items. For enterprise clients, communications roles can also be part of a report approval review queue
Auditor	An auditor is a special type of role designed to review and approve data and reporting (for audit or assurance purposes). For example, when you submit an ESG or sustainability report for approval (if you have an approval queue available in your account and set up), auditors are able to review and approve the report, or request corrections
Developer	Developer user roles can use a Brightest API key to make authenticated requests to our REST API. To request an API key, please contact your Brightest account manager or [e-mail]
Member (Employee)	A member is an employee or other part of your broader community who might sign up for or participate in an event, fundraiser, or other action. Members do not have access to your Brightest dashboard and reporting

You can also use the "Partners" tab to invite third parties your organization would like to collaborate with, for example suppliers or non-profits. Partner users don't have access to your account, they'll receive access to a separate, streamlined Brightest account that has abilities to collaborate and share data and documents with yours.

Once your team-members and/or supporters sign up for Brightest, they can then be segmented with Brightest teams and groups for impact tracking, measurement, or other purposes.

To help us help you make setup as easy as possible, invite teammates with their organization email address.

---

Customizable Data Collaborator Access Configuration

To allow your data collaborators to also enter and edit Transit events associated with their assets, as well as export data related to their asset(s), you can enable these permissions by:

1. Navigate to the Manage Teams module
2. If you haven’t done so already, invite your team members and assign them the “Data Collaborator” role as appropriate. Once they have completed their account registration, their names will appear in your “Teammates” list.

3. In the "Configure Access" column of your "Teammates" list, you'll see the button. Click on this button next to each data collaborator to customize their access.
4. In the "Configure Access Permissions" form, check the box next to each permission you wish to grant to the user

   1. Added permission options:

      1. Access Transit: When enabled, this user can create and edit their own Transit events, while maintaining view-only access to other Transit events and activity within this license.

      2. Download and Export Data: When enabled, this user can export and download data related to their asset(s) and activity.

5. Click "Update"

Click on the configuration button next to each data collaborator

Select the checkbox next to each permission you wish to grant to the user. Then, click "Update"