Access follows your role in the organisation and the sites you are assigned to. Events use the same site rules as documents: admins and auditors see every site; members and viewers see the sites they are assigned to.

Events only appear when incident management is enabled for your organisation.

Anyone who can view documents for that site can open its events, including the list, Reporting, and the event page.

The Employee Accident Record Book is tighter. If you cannot browse the organisation book, you only see accident records where you are the injured employee. Other people see anonymised personal details unless they own that investigation. See The Employee Accident Record Book.

Affected-person personal details on an event are limited to a site manager or above.

Logging, editing, adding actions, adding case notes, attaching documents, and moving status need the same permission as uploading a document. Viewers can read an event and cannot change it.

You cannot change an event that has been merged into another one.

Confirming FSMS compliance, requesting a document, returning an event, escalating, adding case notes during review, and closing are for a site manager or above. That includes site managers, area managers, managers, auditors, and admins.

You cannot confirm compliance or close an event you investigated yourself. An admin or auditor can close it anyway.

Reopen event is also limited to a site manager or above.

Closing an External Contractor Visit uses the same site-manager-or-above rule.

Delete on the list, and Delete event on a row, are limited to roles that can delete documents. Members and viewers do not see delete. Removing an attached document follows the same rule, and only while the event is open.

Deleting an event cannot be undone. Prefer Closed when you need to keep the record. See How to review and close an event.