CAM user roles
Assign users and groups with roles to prepare them to user the CAM application.
Role permissions and responsibilities
| Role title \[name\] | Description | Contains roles |
|---|---|---|
| Authorization Official\(sn\_irm\_cont\_auth.authorization\_official\) | Responsible for accepting an information system into an operational environment at a known risk level.The Authorization Official is entitled to approve and update authorization packages. | - sn\_irm\_cont\_auth.reader |
| Continuous Authorization and Monitoring administrator\(sn\_irm\_cont\_auth.admin\) | Responsible for all system administration duties in the CAM application. | - sn\_audit.manager - sn\_compliance.admin - sn\_doc.admin - sn\_irm\_cont\_auth.reader - sn\_irm\_cont\_auth.scheduler |
| Executive Reader\(sn\_irm\_cont\_auth.executive\_read\) | Read-only access to all modules of the CAM application. | sn\_irm\_cont\_auth.reader. Users with this role can access CAM Workspace. |
| Information Owner\(sn\_irm\_cont\_auth.information\_owner\) | Responsible for statutory, management, or operational authority and the establishment of policies and procedures governing its generation, collection, processing, dissemination, and disposal. The user can also update information types of an authorization package. | - sn\_audit.user - sn\_irm\_cont\_auth.reader |
| Information System Security Manager\(sn\_irm\_cont\_auth.info\_system\_sec\_manager\) | Responsible for conducting information system security management activities. They develop and maintain the system-level cybersecurity program.Can update the authorization package. | - sn\_compliance.user - sn\_irm\_cont\_auth.reader |
| Information System Security Officer\(sn\_irm\_cont\_auth.info\_system\_sec\_officer\) | Responsible for ensuring that the appropriate operational security posture is maintained for an information system.Can update the authorization package. | - sn\_compliance.user - sn\_irm\_cont\_auth.reader |
| Reader\(sn\_irm\_cont\_auth.reader\) | Read-only role. Users with this role can access CAM Workspace. | - sn\_audit.reader - sn\_grc\_workspace.task\_reader - sn\_grc\_workspace.user - sn\_compliance.reader - sn\_incident\_read - sn\_change\_read - sn\_vul.read\_all - sn\_si.read |
| Scheduler\(sn\_irm\_cont\_auth.scheduler\) | Responsible for running all scheduled jobs for the application. This role is for a technical user. | sn\_irm\_cont\_auth..system\_owner |
| Security Control Assessor\(sn\_irm\_cont\_auth.sec\_control\_assessor\) | Responsible for conducting a thorough assessment of the management, operational, and technical security controls of an information system. | - sn\_audit.manager - sn\_compliance.user - sn\_irm\_cont\_auth.reader |
| System Owner\(sn\_irm\_cont\_auth.system\_owner\) | Responsible for procuring, developing, integrating, modifying, operating, and maintaining an information system. | - sn\_audit.user - sn\_compliance.user - sn\_irm\_cont\_auth.reader |
| System User\(sn\_irm\_cont\_auth.system\_user\) | Responsible for performing actual work in the system. They can update authorization boundaries, filter, elements, milestones, and acceptance tasks. | - sn\_audit.user - sn\_irm\_cont\_auth.reader - business user |
Parent Topic:Reference