Roles installed with the GRC Risk Workspace

The GRC: Risk Workspace application installs the roles for Operational risk manager and IT risk manager for the users to perform their respective tasks.

Table 1. Roles and their descriptions

Role title [name]	Description	Contains roles
Operational risk manager (sn_risk_workspace.operational_risk_manager)	Operational Risk Managers are a part of the operational risk team that manages the risk posture of the organization. They can do the following tasks: Perform risk assessments View risk events related data View the heatmaps for the risk assessments Create feedback on records or fields in a record Create, modify, and delete any risk assessment projects. Note: The Operational risk manager role is available only when both the Risk Workspace and Advanced Risk applications are installed.	sn_risk.manager sn_compliance.manager sn_audit.manager sn_rvw_feedback.reviewer sn_risk_advanced.risk_asmt_project_manager
IT Risk manager (sn_risk_workspace.IT_risk_manager)	IT risk managers work with various stakeholders to ensure that IT risks are managed within the risk appetite of the organization. They can do the following tasks: Identify risks to assess Manage risk responses Create key risk indicators Create feedback on records or fields in a record Create, modify, and delete any risk assessment projects.	sn_risk.manager sn_compliance.manager sn_audit.manager sn_rvw_feedback.reviewer sn_risk_advanced.risk_asmt_project_manager
Business operational risk manager (sn_risk_workspace.business_op_risk_manager) manager	Business operational risk managers are the first lines of defense for each individual line of business. They are responsible to manage the risk posture of their specific business units.	sn_risk.user sn_compliance.user sn_audit.user sn_rvw_feedback.respondent sn_risk_advanced.risk_asmt_project_user