Does ViaSyst implement role-based access controls (RBAC)?

Yes. ViaSyst applies a strict, granular role-based access control model. All users have controlled access with login and password, under CB Admin control, covering roles such as CB/Department Admin, Sales Manager, Reviewer, Auditor/Lead Auditor, and client organisation contacts. Each role carries precisely defined rights, for example, a CB Admin has full dashboard access covering all organisations, while an auditor only sees the organisations assigned to them. For each user, the dashboard is constructed only with the organisations assigned to them: a CB Admin with overall rights sees all organisations, while an auditor with 17 assigned organisations sees only those 17. Certain sensitive functions, such as data extraction and administration, are restricted to CB Admin users only. Additional rights (e.g., editing organisation contacts) can be granted or withdrawn as needed.