Core concepts
Roles & access
Who can do what, and how tenant isolation works.
Resilira is multi-tenant. Every record belongs to an organisation, and database Row-Level Security guarantees one org can never see another's data — enforced in the database, not just the app.
Roles
- Owner / Admin: full control, billing, members, approvals.
- Planner: create and edit processes, BIAs, risks, plans and exercises.
- Process Owner: contribute BIAs for assigned processes.
- Responder: acknowledge incident notifications.
- Auditor: read-only access to everything, including the audit log.
Contributors and responders are free and unlimited — you only pay for the people who manage the program.