🗝️

Incident Permissions

Incident Roles and Permissions

Allma supports mapping explicit Permissions to each of your custom Incident Roles so that you can ensure only the right folks take the certain actions. You can find a guide below on how to configure your Permissions with your Incident Roles, and review each Permission to understand what it does.

Permissions

The following are the list of configurable permissions.

No restrictions from any functionality within an incident

This will override all other Permissions, and is typically what you'd want your Incident Commander or other most-trusted Participant Roles to have access to. With this Permission, no behaviors are restricted from the individual.

Interact with the status page, including being able to post updates and change component statuses

This will enable the user to interact with your linked StatusPage.io Status Page. Typically, only approved employees have access to this service, and by connecting it to Allma and using this permission to manage who can invoke our integration, you can maintain tight oversight over who can communicate externally with your customers.

When viewing /allma status the following buttons are restricted by this permission:

image
image

Assign and change roles of other collaborators

This will enable you to control who can assign Roles to other folks in the Incident. Typically this would be the responsibility of an Incident Commander or other senior team member.

When viewing /allma status the following button is restricted by this permission:

image

Note: This will not stop someone from assigning themselves an Incident Role if it is available.

Create and edit timeline entries

This will enable you to control who can contribute timeline entries to the Incident directly. Some participants and roles are only in the incident to be kept informed or to help with the discussion but aren't responsible for keeping the Timeline of events up to date.

When viewing /allma status the following button is restricted by this permission:

image

Note: Editing timeline entries is only available in the Web App and only available to Allma Admin level individuals.

Note: Allma Admins are able to add Timeline entries to any incident via Allma's Web UI, regardless of their incident participant role.

Modify the incident’s severity

This will enable you to control who can modify the incident's severity, so that only those who are attuned to how your processes work are able to raise or lower severity level after the incident is declared.

When editing an existing incident, the following drop down is restricted by this permission:

image

Note: This only prevents a change to the existing severity on an Incident. When declaring a new incident, a severity can always be chosen.

Default Roles and Permissions

For new Allma customers, four default roles are created on your account with the following default permissions:

  • Incident Commander
    • No restrictions from any functionality within an incident.
  • Communications Lead
    • Create and edit timeline entries.
    • Modify the incident’s severity.
    • Interact with the status page, including being able to post updates and change component statuses.
  • Participant
    • Create and edit timeline entries.
  • Watcher
    • No permissions assigned

For existing Allma customers, all of your existing roles have been defaulted to the following permissions to ensure continuity of your existing experience with Allma:

  • Assign and change roles of other collaborators.
  • Modify the incident’s severity.
  • Create and edit timeline entries.

Default permissions can be changed at any time via the process described below.

Setting Up Permissions

Setting up permissions in Slack

From within Slack, if you are an Allma admin, you can edit the permissions assigned to each role

  • Click on the Allma app in Slack, scroll down and select "Manage Roles"
The "Apps" section can be found in the Slack sidebar.
The "Apps" section can be found in the Slack sidebar.
These buttons can be found at the bottom of Allma's Slack "Home" page after selecting "Allma" in the Slack sidebar.
These buttons can be found at the bottom of Allma's Slack "Home" page after selecting "Allma" in the Slack sidebar.
  • Pick any role from the list and click "Edit"
image
  • Scroll down to the bottom of the role details dialog and select the combination of permissions you would like for the role
image
  • Click "Save" to update the role's permissions

Setting up permissions in Allma Web

From within Allma Web, if you are an Allma admin, you can edit the permissions assigned to each role

  • Open your browser and visit https://app.allma.io/
  • Click the gear icon on the left-hand side and select "Roles". If you do not see the "Gear" icon on the left, you are not an Allma admin and cannot modify permissions for roles.
image
  • Click the pencil icon for the role you wish to edit. Scroll down in the dialog presented to configure permissions for that role
image
  • Click "Edit role" to save the changes to the role