Settings: who can work on ESG, and the approval rules

Steps

1. 1

   Open Access

   In ESG and Carbon select Access. The heading names the module and the entity. The line under it says what this page is: who can view, create, edit and approve here, and the role grants behind it. The link Access control settings opens the organisation-wide screen with the same rules.

   • Select Access
2. 2

   Read the table Who can act on ESG

   The first table counts the people who can View, Create, Edit and Approve ESG records for this entity. Each number is a button. Select the number under View to list those people.

   • Select 4 people can View: All record types
3. 3

   See who can approve

   Select the number under Approve. The list underneath names each person, the role that gives them the right, where the role applies, how long it is valid and where it was granted. Here the two administrators hold it across the whole organisation and the Compliance officer holds it for this entity.

   • Select 3 people can Approve: All record types
4. 4

   Read the role grants

   Scroll to Role grants covering this entity. It lists every assignment that reaches this entity, with Edit and Revoke at the end of each line. The switch Only roles that include ESG is on; select it to see every role granted here, then select it again to return to the ESG ones.

   • Select Only roles that include ESG
   • Select Only roles that include ESG
5. 5

   Select Grant access for this module

   Scroll back up and select Grant access for this module. Grant role opens. Under Who you choose a Person, a Group or an API key, which is a sign-in for another computer system. Keep Person.

   • Select Grant access for this module
6. 6

   Choose the person and the role

   Open Person and choose Noura Salem, the legal counsel, who has been asked to read the sustainability report. Open Role. Only roles that include ESG are listed while the switch below it is on. Choose Compliance officer.

   • Select Choose a person
   • Select Choose a role

   

7. 7

   Check Where and switch on Read-only

   Where is already set to this entity; a role can also be granted over a unit or the whole organisation. Switch on Read-only. The note explains that this keeps only the role's view and export permissions, so Noura can read and download but change nothing.

   • Select Read-only
8. 8

   Set the end date and the reason

   Leave Valid from empty to start now. In Valid until enter the day and time the access should end, here six in the evening on the thirty-first of December 2026. Leave Emergency access off; it is for urgent, short-lived access. In Reason say why the access is given.

   • Type Valid until: 2026-12-31T18:00
   • Type Reason: Legal review of the 2026 sustainability report
9. 9

   Select Grant

   Select Grant. The grant is saved, or, if your organisation requires a second administrator for it, sent for that approval. The new line appears under Role grants covering this entity with its validity.

   • Select Grant
10. 10

    Read the approvable actions

    Scroll to Approval policies. It lists the three actions in this module that need a second person: Approve an ESG report, Approve an ESG materiality assessment, and Verify an emission record. Beside each is the right the approver must hold, and Default, which means no special rule has been saved.

11. 11

    Select Verify an emission record

    Select Verify an emission record. The sentence under the heading states the rule in force: by default, one approver holding the ESG edit right on the same entity, with strict maker and checker. That is why the person who entered a record could not verify it.

12. 12

    Read the policy form without changing it

    Below is the form an administrator uses to change the rule. Maker and checker can be strict, or allow self-approval with a written justification for small teams. Each approval step has a name, the right the approver needs, where they must hold it and how many approvals are needed, and Add step adds a second stage. Save policy would store a rule for this entity. Leave it as it is.