Users & Roles Team
Multiple users and role-based access require a Team license. Free and Pro are single-user. NullReport has three roles, each building on the one before it.
The three roles
- Admin: full access to any report, any finding template, DOCX template uploads, user management, and all default settings.
- Editor: creates reports, edits the ones they're assigned to (or created), creates finding templates, and views everything read-only. Cannot manage users, settings, or DOCX templates.
- Viewer: read-only access. Can view and export, but cannot create or edit anything, cannot be assigned, and cannot comment or lock fields.
Permissions at a glance
✓ = allowed · Assigned = only on assigned reports · ✗ = not allowed
| Action | Admin | Editor | Viewer |
|---|---|---|---|
| View reports | ✓ | ✓ | ✓ |
| Create reports | ✓ | ✓ | ✗ |
| Edit any report | ✓ | ✗ | ✗ |
| Edit assigned reports | ✓ | ✓ | ✗ |
| Delete reports | Any | Own | ✗ |
| Comment on reports | ✓ | Assigned | ✗ |
| Lock fields while editing | ✓ | Assigned | ✗ |
| Export reports | ✓ | ✓ | ✓ |
| Create finding templates | ✓ | ✓ | ✗ |
| Edit finding templates | Any | Own | ✗ |
| Upload / delete DOCX templates | ✓ | ✗ | ✗ |
| Download DOCX templates | ✓ | ✓ | ✓ |
| Manage users | ✓ | ✗ | ✗ |
| Edit default settings | ✓ | ✗ | ✗ |
| Change own password | ✓ | ✓ | ✓ |
Managing users
The Users page lives in the navbar dropdown and is visible only to admins.
The user list: each row shows name, username, a role badge, and a ⋯ menu.
Create: click Add User, set a username (lowercase letters, numbers, dots, dashes, and underscores), an initial password (6 or more characters), a display name, and a role. New users must change their password on first login.
Edit or change role: the ⋯ menu lets you edit the name and role, or switch the role inline (it takes effect immediately). Usernames and passwords aren't admin-editable; users manage their own password in Settings.
Delete: the ⋯ menu, then Delete user. Their reports and templates are reassigned to the admin who deleted them, and they're removed from all assignee lists.
You can't delete or demote yourself, and you can't remove the last admin, so there's always at least one.
The default admin account
First boot creates a default admin (username admin, password admin) that must change
its password on first login. Create personal admin accounts rather than sharing the default one.
Each account allows one active session at a time. Logging in somewhere new signs you out elsewhere, so two people can't share one account.
Report assignment
Assignment decides which Editors can work on a report:
- The creator is always assigned and can't be removed.
- Admins and assigned Editors can add or remove other assignees.
- Only Admins and Editors can be assigned; Viewers can't.
- Admins can edit any report regardless of assignment.
Manage it from a report's Metadata tab, in the Assignees card. See Reports.
Real-time collaboration
When several people open the same report, NullReport prevents clobbering with field locking and live presence:
You also see who else is currently viewing the report. Locks auto-expire after about a minute so an abandoned tab never blocks anyone, and Viewers can't lock, so they never get in the way.