Docs

Core concepts

Roles & access

Who can do what, and how tenant isolation works.

Resilira is multi-tenant. Every record belongs to an organisation, and database Row-Level Security guarantees one org can never see another's data — enforced in the database, not just the app.

Roles

  • Owner / Admin: full control, billing, members, approvals.
  • Planner: create and edit processes, BIAs, risks, plans and exercises.
  • Process Owner: contribute BIAs for assigned processes.
  • Responder: acknowledge incident notifications.
  • Auditor: read-only access to everything, including the audit log.

Contributors and responders are free and unlimited — you only pay for the people who manage the program.