Inviting team members and managing user roles

Folelse uses role-based access control (RBAC). Every user is assigned one role that determines what they can see and do in the platform. You must be an Admin to invite or remove users.

Available roles

• Admin — full access to all modules, billing, users, and settings.
• DPO (Data Protection Officer) — full access to all compliance modules; cannot manage billing or invite users.
• SIRO (Senior Information Risk Owner) — access to risks, assets, DPIAs, reports, and DSPT. Cannot manage users.
• Caldicott Guardian — NHS-only role. Access to patient data processing records, DPIAs, and clinical safety modules.
• Reviewer — read-only access to all modules. Can leave comments but not edit records.
• Policy Editor — can create and edit policies and procedures only.

How to invite a user

1. 1 Go to Dashboard → Users.
2. 2 Click the + Invite User button (bottom right).
3. 3 Enter the user's email address and select their role.
4. 4 Click Send Invitation.
5. 5 The user will receive an email with a secure link. The link expires in 48 hours.
6. 6 Once they sign up, they appear in your Users list as Active.

Changing a user's role

1. 1 Go to Dashboard → Users.
2. 2 Click the edit (pencil) icon on the user's card.
3. 3 Select the new role from the dropdown.
4. 4 Click Save. The change takes effect immediately on their next page load.

Removing a user

1. 1 Go to Dashboard → Users.
2. 2 Click the delete (bin) icon on the user's card.
3. 3 Confirm the deletion. The user's login is immediately revoked.
4. 4 Their historical records (SARs, DPIAs, audit entries) are preserved for compliance purposes.

User seat limits

Starter plans include 5 user seats; Professional includes 100. If you reach your limit, you will see an error when inviting. To add more seats, go to Dashboard → Billing → Add-ons and enable Additional Users (£6/user/month, flat rate).