Role Architecture

AlignSure’s role architecture ensures every compliance action is performed by an authorized, identified individual with clear accountability.

Role Hierarchy

Administrator
    └── Owner
         └── Reviewer
              └── Contributor

Administrator

• Configures tenant settings, framework selection, and integration connections
• Manages user role assignments
• Accesses all audit logs and system-level reports
• Cannot be assigned by users — requires AlignSure system configuration

Owner

• Accountable for compliance outcomes within a specific domain
• Receives escalations when reviewers flag issues or deadlines are missed
• Approves final evidence packages for audit submission
• Views all data within their assigned compliance domain

Reviewer

• Subject matter expert who validates evidence and documents
• Performs reviews within the Reviewer Workspace
• Signs attestations that become part of the audit trail
• Scoped to specific compliance domains (HIPAA, workers’ comp, COI, etc.)

Contributor

• Submits documents and data for compliance review
• Responds to validation requests from reviewers
• Views their own submissions and status
• Cannot approve, reject, or attest to compliance evidence

Reviewer Specializations

Reviewers are further classified by domain expertise:

Specialization	Domain	Typical Title
Attorney	Legal compliance, BAA, contracts	General Counsel, Compliance Attorney
Safety Advisor	OSHA, essential duties, hazards	Safety Director, EHS Manager
Insurance Advisor	COI, workers’ comp, premiums	Risk Manager, Insurance Coordinator
Medical Provider	Treatment plans, RTW, recovery	Occupational Health Physician, Nurse Case Manager

Identity Binding

All roles are tied to Microsoft Entra ID accounts. This means:

• No local AlignSure accounts — if a user loses Microsoft access, they lose AlignSure access
• Role changes are logged with the administrator’s identity and timestamp
• Terminated users are automatically deactivated when removed from Entra ID
• Group-based assignment is supported for organizations using Entra ID security groups