Knowledge base / Getting started
Accounts and roles
Every screen and every export carries a named person. That is what an auditor expects to see, so ClearDuty asks for an account on first use.
Roles
| Role | Can |
|---|---|
| Admin | Everything, plus manage accounts, register SAP systems and switch screens off for everyone (Settings → Setup). |
| Analyst | Upload data, run analysis, edit rules and controls, record remediation. |
| Reviewer | Review findings and record the reviewer sign-off. |
| Viewer | Read results. Viewers cannot upload, edit or sign off. |
Where accounts are stored
Accounts are kept in the browser where they were created. Each analyst uses ClearDuty on their own computer. To move work between computers, save a workspace file and open it on the other computer.
Single sign-on
When ClearDuty is hosted on your own domain behind Cloudflare Access (or a similar identity proxy), the sign-in is handled by your identity provider and ClearDuty applies the role mapped to the e-mail address. This is part of the Enterprise edition.
Still stuck? Ask us — we answer within one working day.