Who can do what

A visual map of every persona in the app. Switch on Edit configuration to change what each persona should be allowed to do — your changes are saved on this device and can be exported as JSON so they can later be applied to the app's real rules.

Administrator

Configuration and recovery seat. Owns the templates and bypasses every workflow guard.

Allowed

Set OneQMS / Entity level on any chapter or task in Audit Template
Assign OneQMS owners and attach OneQMS files and reference links
Select which regs and tasks are in scope for an audit
Select and de-select framework chapters and tasks for an audit
Verify, re-open, re-assign and re-date any prep task
Open every page, pop-out and console, and act as any person

Not allowed

Nothing is blocked — every change is written to the task history

Audit TemplateAudit PrepEntity PrepSME WorkspaceRoles & PermissionsBusiness Rules

Preparation action matrix

Template configuration, audit scoping, SME assignment and the task lifecycle (Not Started → In Progress → Submitted for Review → Verified, with Rework Requested as the only way back).

Action	Moves	Administrator	Host	ATMS Requestor	Back Room Lead	Stream Lead	Stream Support	Reg Compliance	SME	Request Support	Scribe	JJRC SME Prep
Set OneQMS / Entity level	Audit Template item → level
Assign OneQMS owner, files & links	OneQMS item → central evidence
Select / de-select chapters & tasks	Catalogue → audit scope
Assign SMEs to a task	Unassigned → assigned
Set or change the due date	Task → due date
Start work on a task	Not Started → In Progress
Upload attachments & reference links	Task → evidence
Add a free-text comment	Task → comment thread
Submit evidence for review	In Progress / Rework → Submitted for Review
Verify the task	Submitted for Review → Verified
Request rework with feedback	Submitted for Review → Rework Requested
Ping the assigned SMEs	Task → Teams + email chase
Define the entity's Audit Roster	Entity → default streams & team
Create a new audit for an entity	Entity → audit
Add or remove an entity favourite	Choose an Entity → working list

Verification is deliberately separated from preparation: nobody verifies evidence they produced themselves.

Live request lanes — entity console

Applies to the Back Room Lead console embedded on the entity readiness page, where requests raised during the audit move between lanes. Derived from the rules the app actually enforces.

Action	Moves	Administrator	Host	ATMS Requestor	Back Room Lead	Stream Lead	Stream Support	Reg Compliance	SME	Request Support	Scribe	JJRC SME Prep
Assign SME	New Request → SME Assigned, pending SME confirmation
Confirm I'm working on this + ETA	SME Assigned, pending SME confirmation → SME confirmed, in progress
Reject request	SME Assigned, pending SME confirmation → Stuck
Request Regulatory Compliance support	SME Assigned, pending SME confirmation, SME confirmed, in progress → Compliance Support requested
Confirm ready for Backroom review	SME confirmed, in progress → Backroom review
Confirm Request/SME ready for Front Room	Backroom review → Request/SME ready
Needs rework	Backroom review → SME confirmed, in progress
Move to Front Room	Request/SME ready → In Front Room
Close	In Front Room → Closed
Create follow-up request	In Front Room
Completed	Compliance Support requested → Backroom review
Send to Clarification	New Request, SME Assigned, pending SME confirmation, SME confirmed, in progress, Backroom review → Clarification
Send to Stuck	New Request, SME Assigned, pending SME confirmation, SME confirmed, in progress, Backroom review → Stuck

† Facilitator take-over: when a Request Facilitator is assigned to a request, the Facilitator performs these actions instead of the SME.

Rules that apply to everyone

SMEs act only on tasks they are assigned to — every other task opens read-only.
Only the Compliance seat verifies a task, and only after evidence has been submitted for review.
Rework always requires written feedback; it is stored on the task and shown to the SME.
Assignment notifications (Teams + email) are only sent on the explicit Assign action, never while picking names.
OneQMS / Entity level is set in Audit Template only; Audit Prep and Entity Prep display it read-only.
Audit Prep shows the items already in the audit; the scope itself is changed from “Select regs and tasks in scope”.
Every status change, verification, rework and ping is written to the task history with actor and timestamp.