The Staff role
A lowest-privilege role for people who only need to read and acknowledge policies, and nothing else.
Staff is Coverage's lowest-privilege role, built for people who only need to read and acknowledge the policies that apply to them. A Staff user sees the policy review experience and nothing else. This keeps audit evidence, ratings, reports and settings walled off from general organisation staff.
Before you start You'll need an admin role with user management access (an Administrator, or a Provider Manager who manages users). Coverage's roles, from most to least access, are Administrator, Provider Manager, Service Team Member and Staff.
What the Staff role can and can't do
Can:
- View the policies assigned to them (For review)
- Read and acknowledge those policies
Can't:
- Access Supporting Documents, Standards, Reports, PCI, Users or Policy management. Everything outside acknowledgements is hidden and blocked.
Invite someone as Staff
- Go to Manage → Users.
- Select Add new user. The Add a new user modal opens.
- Enter the person's Email.
- Set User level to Staff. (The Services field is hidden for Staff, since none is needed.)
- Send the invite. The person receives an email to Complete registration, where they set their name and password.
Adding a user with User level set to Staff.
What a Staff user experiences
After completing registration and logging in, a Staff user lands directly on Policies → For review, with no tabs and no other sidebar sections. They open a policy with Start reviewing, read it, and acknowledge it (see Acknowledge a policy). Any other page is blocked.
What a Staff user sees: the policy review list, and nothing else.
Tip Reach for Staff whenever someone only needs to acknowledge policies. Don't over-grant Service Team Member, which also exposes audit evidence, outcome ratings and reports.
Good to know
- The Staff role is intentionally minimal. The absence of tabs, sidebar items and a Services picker is by design, not a fault.
- No service assignment is required for a Staff user; the role is provider-scoped.