Security

Roles

Standard CMIForge roles are visible and locked. Customer roles can be created for firm-specific team access.

Security Teams

Create Customer Role

Name

Description

Conflicts

Review conflict searches Record clearance, potential conflict, conflict, or needs-info decisions.

Run conflict searches Create party-based conflict search requests.

View conflict searches View conflict search requests and results.

Entities

Approve entity changes Approve or reject proposed changes to clients and matters.

Create entities Create clients, matters, and users.

Edit restricted entity sections Maintain sensitive entity panels such as aliases, relationships, links, notes, and archive actions.

Submit entity changes Submit proposed changes to clients, matters, and users.

View business entities View clients, matters, parties, and contacts.

View confidential documents View, preview, open, and download entity documents marked confidential.

View restricted entity sections View sensitive entity panels such as aliases, relationships, linked parties, notes, audit history, pending changes, and invite history.

View user entities View user profiles and their business relationships separately from client and matter data.

Environments

Access development environment Choose and work in the tenant development environment.

Access test environment Choose and work in the tenant test environment.

Forms

Design forms Create and publish form versions.

Form and workflow admin Retire obsolete form and workflow definitions while preserving historical submissions and workflow audit trails.

Submit forms Submit available intake forms.

View forms View available form definitions.

Imports/Exports

Manage scheduled exports Configure and run scheduled customer-owned data exports.

Run imports Upload CSV files to import clients, matters, and parties.

View imports/exports View import/export center, export downloads, and import batch history.

Reporting

View reports View hardcoded operational reports.

Security

Manage security Manage teams, roles, and permission assignments.

Manage wall teams Create and maintain ethical-wall teams without granting access to ordinary security teams and roles.

Submissions

Approve submissions Approve or return workflow tasks.

Convert submissions Create client and matter records from submissions.

Edit existing client fields on submissions Override the read-only client-data guard when an intake submission reuses an existing client.

View all submissions View all submitted intake records.

View own submissions View submissions submitted by the user.

System

Impersonate users Temporarily view the app as another active user for support, routing, and approval testing.

Manage API applications Create, rotate, scope, and revoke tenant API credentials.

Manage maintenance rules Configure and run entity maintenance and health-check rules.

System administrator Full CMIForge platform access.

Time

Approve time Approve submitted time entries.

Create time Record time entries.

Edit time Edit existing time entries.

View all time View time entries across users, clients, and matters.

View own time View time entries recorded by the user.

Workflows

Design workflows Create and edit workflow definitions and steps.

View all workflow queues View all open workflow tasks.

View workflow queue View assigned workflow tasks.

Administrator

Active CMIForge standard

Full CMIForge administration.

Assignments

Teams: 1
Direct users: 2
Permissions: 40

This role is managed by CMIForge Admin because app behavior depends on it.

Role permissions

Conflicts

Review conflict searches Record clearance, potential conflict, conflict, or needs-info decisions.

Run conflict searches Create party-based conflict search requests.

View conflict searches View conflict search requests and results.

Entities

Approve entity changes Approve or reject proposed changes to clients and matters.

Create entities Create clients, matters, and users.

Edit restricted entity sections Maintain sensitive entity panels such as aliases, relationships, links, notes, and archive actions.

Submit entity changes Submit proposed changes to clients, matters, and users.

View business entities View clients, matters, parties, and contacts.

View confidential documents View, preview, open, and download entity documents marked confidential.

View restricted entity sections View sensitive entity panels such as aliases, relationships, linked parties, notes, audit history, pending changes, and invite history.

View user entities View user profiles and their business relationships separately from client and matter data.

Environments

Access development environment Choose and work in the tenant development environment.

Access test environment Choose and work in the tenant test environment.

Forms

Design forms Create and publish form versions.

Form and workflow admin Retire obsolete form and workflow definitions while preserving historical submissions and workflow audit trails.

Submit forms Submit available intake forms.

View forms View available form definitions.

Imports/Exports

Manage scheduled exports Configure and run scheduled customer-owned data exports.

Run imports Upload CSV files to import clients, matters, and parties.

View imports/exports View import/export center, export downloads, and import batch history.

Reporting

View reports View hardcoded operational reports.

Security

Manage security Manage teams, roles, and permission assignments.

Manage wall teams Create and maintain ethical-wall teams without granting access to ordinary security teams and roles.

Submissions

Approve submissions Approve or return workflow tasks.

Convert submissions Create client and matter records from submissions.

Edit existing client fields on submissions Override the read-only client-data guard when an intake submission reuses an existing client.

View all submissions View all submitted intake records.

View own submissions View submissions submitted by the user.

System

Impersonate users Temporarily view the app as another active user for support, routing, and approval testing.

Manage API applications Create, rotate, scope, and revoke tenant API credentials.

Manage maintenance rules Configure and run entity maintenance and health-check rules.

System administrator Full CMIForge platform access.

Time

Approve time Approve submitted time entries.

Create time Record time entries.

Edit time Edit existing time entries.

View all time View time entries across users, clients, and matters.

View own time View time entries recorded by the user.

Workflows

Design workflows Create and edit workflow definitions and steps.

View all workflow queues View all open workflow tasks.

View workflow queue View assigned workflow tasks.

CMIForge Support

Active CMIForge standard

CMIForge vendor support access. Requires tenant support access to be enabled before support impersonation can start.

Assignments

Teams: 0
Direct users: 0
Permissions: 1

This role is managed by CMIForge Admin because app behavior depends on it.

Role permissions

Conflicts

Review conflict searches Record clearance, potential conflict, conflict, or needs-info decisions.

Run conflict searches Create party-based conflict search requests.

View conflict searches View conflict search requests and results.

Entities

Approve entity changes Approve or reject proposed changes to clients and matters.

Create entities Create clients, matters, and users.

Edit restricted entity sections Maintain sensitive entity panels such as aliases, relationships, links, notes, and archive actions.

Submit entity changes Submit proposed changes to clients, matters, and users.

View business entities View clients, matters, parties, and contacts.

View confidential documents View, preview, open, and download entity documents marked confidential.

View restricted entity sections View sensitive entity panels such as aliases, relationships, linked parties, notes, audit history, pending changes, and invite history.

View user entities View user profiles and their business relationships separately from client and matter data.

Environments

Access development environment Choose and work in the tenant development environment.

Access test environment Choose and work in the tenant test environment.

Forms

Design forms Create and publish form versions.

Form and workflow admin Retire obsolete form and workflow definitions while preserving historical submissions and workflow audit trails.

Submit forms Submit available intake forms.

View forms View available form definitions.

Imports/Exports

Manage scheduled exports Configure and run scheduled customer-owned data exports.

Run imports Upload CSV files to import clients, matters, and parties.

View imports/exports View import/export center, export downloads, and import batch history.

Reporting

View reports View hardcoded operational reports.

Security

Manage security Manage teams, roles, and permission assignments.

Manage wall teams Create and maintain ethical-wall teams without granting access to ordinary security teams and roles.

Submissions

Approve submissions Approve or return workflow tasks.

Convert submissions Create client and matter records from submissions.

Edit existing client fields on submissions Override the read-only client-data guard when an intake submission reuses an existing client.

View all submissions View all submitted intake records.

View own submissions View submissions submitted by the user.

System

Impersonate users Temporarily view the app as another active user for support, routing, and approval testing.

Manage API applications Create, rotate, scope, and revoke tenant API credentials.

Manage maintenance rules Configure and run entity maintenance and health-check rules.

System administrator Full CMIForge platform access.

Time

Approve time Approve submitted time entries.

Create time Record time entries.

Edit time Edit existing time entries.

View all time View time entries across users, clients, and matters.

View own time View time entries recorded by the user.

Workflows

Design workflows Create and edit workflow definitions and steps.

View all workflow queues View all open workflow tasks.

View workflow queue View assigned workflow tasks.

Entity Approver

Active CMIForge standard

Can view entity records and approve assigned entity changes without creating, editing, archiving, or maintaining restricted entity data.

Assignments

Teams: 5
Direct users: 0
Permissions: 4

This role is managed by CMIForge Admin because app behavior depends on it.

Role permissions

Conflicts

Review conflict searches Record clearance, potential conflict, conflict, or needs-info decisions.

Run conflict searches Create party-based conflict search requests.

View conflict searches View conflict search requests and results.

Entities

Approve entity changes Approve or reject proposed changes to clients and matters.

Create entities Create clients, matters, and users.

Edit restricted entity sections Maintain sensitive entity panels such as aliases, relationships, links, notes, and archive actions.

Submit entity changes Submit proposed changes to clients, matters, and users.

View business entities View clients, matters, parties, and contacts.

View confidential documents View, preview, open, and download entity documents marked confidential.

View restricted entity sections View sensitive entity panels such as aliases, relationships, linked parties, notes, audit history, pending changes, and invite history.

View user entities View user profiles and their business relationships separately from client and matter data.

Environments

Access development environment Choose and work in the tenant development environment.

Access test environment Choose and work in the tenant test environment.

Forms

Design forms Create and publish form versions.

Form and workflow admin Retire obsolete form and workflow definitions while preserving historical submissions and workflow audit trails.

Submit forms Submit available intake forms.

View forms View available form definitions.

Imports/Exports

Manage scheduled exports Configure and run scheduled customer-owned data exports.

Run imports Upload CSV files to import clients, matters, and parties.

View imports/exports View import/export center, export downloads, and import batch history.

Reporting

View reports View hardcoded operational reports.

Security

Manage security Manage teams, roles, and permission assignments.

Manage wall teams Create and maintain ethical-wall teams without granting access to ordinary security teams and roles.

Submissions

Approve submissions Approve or return workflow tasks.

Convert submissions Create client and matter records from submissions.

Edit existing client fields on submissions Override the read-only client-data guard when an intake submission reuses an existing client.

View all submissions View all submitted intake records.

View own submissions View submissions submitted by the user.

System

Impersonate users Temporarily view the app as another active user for support, routing, and approval testing.

Manage API applications Create, rotate, scope, and revoke tenant API credentials.

Manage maintenance rules Configure and run entity maintenance and health-check rules.

System administrator Full CMIForge platform access.

Time

Approve time Approve submitted time entries.

Create time Record time entries.

Edit time Edit existing time entries.

View all time View time entries across users, clients, and matters.

View own time View time entries recorded by the user.

Workflows

Design workflows Create and edit workflow definitions and steps.

View all workflow queues View all open workflow tasks.

View workflow queue View assigned workflow tasks.

Entity Manager

Active CMIForge standard

Can view, create, and edit operational entities.

Assignments

Teams: 0
Direct users: 0
Permissions: 19

This role is managed by CMIForge Admin because app behavior depends on it.

Role permissions

Conflicts

Review conflict searches Record clearance, potential conflict, conflict, or needs-info decisions.

Run conflict searches Create party-based conflict search requests.

View conflict searches View conflict search requests and results.

Entities

Approve entity changes Approve or reject proposed changes to clients and matters.

Create entities Create clients, matters, and users.

Edit restricted entity sections Maintain sensitive entity panels such as aliases, relationships, links, notes, and archive actions.

Submit entity changes Submit proposed changes to clients, matters, and users.

View business entities View clients, matters, parties, and contacts.

View confidential documents View, preview, open, and download entity documents marked confidential.

View restricted entity sections View sensitive entity panels such as aliases, relationships, linked parties, notes, audit history, pending changes, and invite history.

View user entities View user profiles and their business relationships separately from client and matter data.

Environments

Access development environment Choose and work in the tenant development environment.

Access test environment Choose and work in the tenant test environment.

Forms

Design forms Create and publish form versions.

Form and workflow admin Retire obsolete form and workflow definitions while preserving historical submissions and workflow audit trails.

Submit forms Submit available intake forms.

View forms View available form definitions.

Imports/Exports

Manage scheduled exports Configure and run scheduled customer-owned data exports.

Run imports Upload CSV files to import clients, matters, and parties.

View imports/exports View import/export center, export downloads, and import batch history.

Reporting

View reports View hardcoded operational reports.

Security

Manage security Manage teams, roles, and permission assignments.

Manage wall teams Create and maintain ethical-wall teams without granting access to ordinary security teams and roles.

Submissions

Approve submissions Approve or return workflow tasks.

Convert submissions Create client and matter records from submissions.

Edit existing client fields on submissions Override the read-only client-data guard when an intake submission reuses an existing client.

View all submissions View all submitted intake records.

View own submissions View submissions submitted by the user.

System

Impersonate users Temporarily view the app as another active user for support, routing, and approval testing.

Manage API applications Create, rotate, scope, and revoke tenant API credentials.

Manage maintenance rules Configure and run entity maintenance and health-check rules.

System administrator Full CMIForge platform access.

Time

Approve time Approve submitted time entries.

Create time Record time entries.

Edit time Edit existing time entries.

View all time View time entries across users, clients, and matters.

View own time View time entries recorded by the user.

Workflows

Design workflows Create and edit workflow definitions and steps.

View all workflow queues View all open workflow tasks.

View workflow queue View assigned workflow tasks.

Form and Workflow Admin

Active CMIForge standard

Can design, publish, copy, and retire forms and workflows.

Assignments

Teams: 0
Direct users: 0
Permissions: 8

This role is managed by CMIForge Admin because app behavior depends on it.

Role permissions

Conflicts

Review conflict searches Record clearance, potential conflict, conflict, or needs-info decisions.

Run conflict searches Create party-based conflict search requests.

View conflict searches View conflict search requests and results.

Entities

Approve entity changes Approve or reject proposed changes to clients and matters.

Create entities Create clients, matters, and users.

Edit restricted entity sections Maintain sensitive entity panels such as aliases, relationships, links, notes, and archive actions.

Submit entity changes Submit proposed changes to clients, matters, and users.

View business entities View clients, matters, parties, and contacts.

View confidential documents View, preview, open, and download entity documents marked confidential.

View restricted entity sections View sensitive entity panels such as aliases, relationships, linked parties, notes, audit history, pending changes, and invite history.

View user entities View user profiles and their business relationships separately from client and matter data.

Environments

Access development environment Choose and work in the tenant development environment.

Access test environment Choose and work in the tenant test environment.

Forms

Design forms Create and publish form versions.

Form and workflow admin Retire obsolete form and workflow definitions while preserving historical submissions and workflow audit trails.

Submit forms Submit available intake forms.

View forms View available form definitions.

Imports/Exports

Manage scheduled exports Configure and run scheduled customer-owned data exports.

Run imports Upload CSV files to import clients, matters, and parties.

View imports/exports View import/export center, export downloads, and import batch history.

Reporting

View reports View hardcoded operational reports.

Security

Manage security Manage teams, roles, and permission assignments.

Manage wall teams Create and maintain ethical-wall teams without granting access to ordinary security teams and roles.

Submissions

Approve submissions Approve or return workflow tasks.

Convert submissions Create client and matter records from submissions.

Edit existing client fields on submissions Override the read-only client-data guard when an intake submission reuses an existing client.

View all submissions View all submitted intake records.

View own submissions View submissions submitted by the user.

System

Impersonate users Temporarily view the app as another active user for support, routing, and approval testing.

Manage API applications Create, rotate, scope, and revoke tenant API credentials.

Manage maintenance rules Configure and run entity maintenance and health-check rules.

System administrator Full CMIForge platform access.

Time

Approve time Approve submitted time entries.

Create time Record time entries.

Edit time Edit existing time entries.

View all time View time entries across users, clients, and matters.

View own time View time entries recorded by the user.

Workflows

Design workflows Create and edit workflow definitions and steps.

View all workflow queues View all open workflow tasks.

View workflow queue View assigned workflow tasks.

Intake Reviewer

Active CMIForge standard

Can review and approve assigned intake workflow tasks.

Assignments

Teams: 3
Direct users: 0
Permissions: 9

This role is managed by CMIForge Admin because app behavior depends on it.

Role permissions

Conflicts

Review conflict searches Record clearance, potential conflict, conflict, or needs-info decisions.

Run conflict searches Create party-based conflict search requests.

View conflict searches View conflict search requests and results.

Entities

Approve entity changes Approve or reject proposed changes to clients and matters.

Create entities Create clients, matters, and users.

Edit restricted entity sections Maintain sensitive entity panels such as aliases, relationships, links, notes, and archive actions.

Submit entity changes Submit proposed changes to clients, matters, and users.

View business entities View clients, matters, parties, and contacts.

View confidential documents View, preview, open, and download entity documents marked confidential.

View restricted entity sections View sensitive entity panels such as aliases, relationships, linked parties, notes, audit history, pending changes, and invite history.

View user entities View user profiles and their business relationships separately from client and matter data.

Environments

Access development environment Choose and work in the tenant development environment.

Access test environment Choose and work in the tenant test environment.

Forms

Design forms Create and publish form versions.

Form and workflow admin Retire obsolete form and workflow definitions while preserving historical submissions and workflow audit trails.

Submit forms Submit available intake forms.

View forms View available form definitions.

Imports/Exports

Manage scheduled exports Configure and run scheduled customer-owned data exports.

Run imports Upload CSV files to import clients, matters, and parties.

View imports/exports View import/export center, export downloads, and import batch history.

Reporting

View reports View hardcoded operational reports.

Security

Manage security Manage teams, roles, and permission assignments.

Manage wall teams Create and maintain ethical-wall teams without granting access to ordinary security teams and roles.

Submissions

Approve submissions Approve or return workflow tasks.

Convert submissions Create client and matter records from submissions.

Edit existing client fields on submissions Override the read-only client-data guard when an intake submission reuses an existing client.

View all submissions View all submitted intake records.

View own submissions View submissions submitted by the user.

System

Impersonate users Temporarily view the app as another active user for support, routing, and approval testing.

Manage API applications Create, rotate, scope, and revoke tenant API credentials.

Manage maintenance rules Configure and run entity maintenance and health-check rules.

System administrator Full CMIForge platform access.

Time

Approve time Approve submitted time entries.

Create time Record time entries.

Edit time Edit existing time entries.

View all time View time entries across users, clients, and matters.

View own time View time entries recorded by the user.

Workflows

Design workflows Create and edit workflow definitions and steps.

View all workflow queues View all open workflow tasks.

View workflow queue View assigned workflow tasks.

Partner

Active CMIForge standard

Can be selected as lead partner and review partner-level intake work.

Assignments

Teams: 0
Direct users: 0
Permissions: 10

This role is managed by CMIForge Admin because app behavior depends on it.

Role permissions

Conflicts

Review conflict searches Record clearance, potential conflict, conflict, or needs-info decisions.

Run conflict searches Create party-based conflict search requests.

View conflict searches View conflict search requests and results.

Entities

Approve entity changes Approve or reject proposed changes to clients and matters.

Create entities Create clients, matters, and users.

Edit restricted entity sections Maintain sensitive entity panels such as aliases, relationships, links, notes, and archive actions.

Submit entity changes Submit proposed changes to clients, matters, and users.

View business entities View clients, matters, parties, and contacts.

View confidential documents View, preview, open, and download entity documents marked confidential.

View restricted entity sections View sensitive entity panels such as aliases, relationships, linked parties, notes, audit history, pending changes, and invite history.

View user entities View user profiles and their business relationships separately from client and matter data.

Environments

Access development environment Choose and work in the tenant development environment.

Access test environment Choose and work in the tenant test environment.

Forms

Design forms Create and publish form versions.

Form and workflow admin Retire obsolete form and workflow definitions while preserving historical submissions and workflow audit trails.

Submit forms Submit available intake forms.

View forms View available form definitions.

Imports/Exports

Manage scheduled exports Configure and run scheduled customer-owned data exports.

Run imports Upload CSV files to import clients, matters, and parties.

View imports/exports View import/export center, export downloads, and import batch history.

Reporting

View reports View hardcoded operational reports.

Security

Manage security Manage teams, roles, and permission assignments.

Manage wall teams Create and maintain ethical-wall teams without granting access to ordinary security teams and roles.

Submissions

Approve submissions Approve or return workflow tasks.

Convert submissions Create client and matter records from submissions.

Edit existing client fields on submissions Override the read-only client-data guard when an intake submission reuses an existing client.

View all submissions View all submitted intake records.

View own submissions View submissions submitted by the user.

System

Impersonate users Temporarily view the app as another active user for support, routing, and approval testing.

Manage API applications Create, rotate, scope, and revoke tenant API credentials.

Manage maintenance rules Configure and run entity maintenance and health-check rules.

System administrator Full CMIForge platform access.

Time

Approve time Approve submitted time entries.

Create time Record time entries.

Edit time Edit existing time entries.

View all time View time entries across users, clients, and matters.

View own time View time entries recorded by the user.

Workflows

Design workflows Create and edit workflow definitions and steps.

View all workflow queues View all open workflow tasks.

View workflow queue View assigned workflow tasks.

Submitter

Active CMIForge standard

Can submit forms and view their own submissions.

Assignments

Teams: 0
Direct users: 0
Permissions: 6

This role is managed by CMIForge Admin because app behavior depends on it.

Role permissions

Conflicts

Review conflict searches Record clearance, potential conflict, conflict, or needs-info decisions.

Run conflict searches Create party-based conflict search requests.

View conflict searches View conflict search requests and results.

Entities

Approve entity changes Approve or reject proposed changes to clients and matters.

Create entities Create clients, matters, and users.

Edit restricted entity sections Maintain sensitive entity panels such as aliases, relationships, links, notes, and archive actions.

Submit entity changes Submit proposed changes to clients, matters, and users.

View business entities View clients, matters, parties, and contacts.

View confidential documents View, preview, open, and download entity documents marked confidential.

View restricted entity sections View sensitive entity panels such as aliases, relationships, linked parties, notes, audit history, pending changes, and invite history.

View user entities View user profiles and their business relationships separately from client and matter data.

Environments

Access development environment Choose and work in the tenant development environment.

Access test environment Choose and work in the tenant test environment.

Forms

Design forms Create and publish form versions.

Form and workflow admin Retire obsolete form and workflow definitions while preserving historical submissions and workflow audit trails.

Submit forms Submit available intake forms.

View forms View available form definitions.

Imports/Exports

Manage scheduled exports Configure and run scheduled customer-owned data exports.

Run imports Upload CSV files to import clients, matters, and parties.

View imports/exports View import/export center, export downloads, and import batch history.

Reporting

View reports View hardcoded operational reports.

Security

Manage security Manage teams, roles, and permission assignments.

Manage wall teams Create and maintain ethical-wall teams without granting access to ordinary security teams and roles.

Submissions

Approve submissions Approve or return workflow tasks.

Convert submissions Create client and matter records from submissions.

Edit existing client fields on submissions Override the read-only client-data guard when an intake submission reuses an existing client.

View all submissions View all submitted intake records.

View own submissions View submissions submitted by the user.

System

Impersonate users Temporarily view the app as another active user for support, routing, and approval testing.

Manage API applications Create, rotate, scope, and revoke tenant API credentials.

Manage maintenance rules Configure and run entity maintenance and health-check rules.

System administrator Full CMIForge platform access.

Time

Approve time Approve submitted time entries.

Create time Record time entries.

Edit time Edit existing time entries.

View all time View time entries across users, clients, and matters.

View own time View time entries recorded by the user.

Workflows

Design workflows Create and edit workflow definitions and steps.

View all workflow queues View all open workflow tasks.

View workflow queue View assigned workflow tasks.

Walls Admin

Active CMIForge standard

Can create and maintain ethical-wall teams and wall membership.

Assignments

Teams: 0
Direct users: 0
Permissions: 1

This role is managed by CMIForge Admin because app behavior depends on it.

Role permissions

Conflicts

Review conflict searches Record clearance, potential conflict, conflict, or needs-info decisions.

Run conflict searches Create party-based conflict search requests.

View conflict searches View conflict search requests and results.

Entities

Approve entity changes Approve or reject proposed changes to clients and matters.

Create entities Create clients, matters, and users.

Edit restricted entity sections Maintain sensitive entity panels such as aliases, relationships, links, notes, and archive actions.

Submit entity changes Submit proposed changes to clients, matters, and users.

View business entities View clients, matters, parties, and contacts.

View confidential documents View, preview, open, and download entity documents marked confidential.

View restricted entity sections View sensitive entity panels such as aliases, relationships, linked parties, notes, audit history, pending changes, and invite history.

View user entities View user profiles and their business relationships separately from client and matter data.

Environments

Access development environment Choose and work in the tenant development environment.

Access test environment Choose and work in the tenant test environment.

Forms

Design forms Create and publish form versions.

Form and workflow admin Retire obsolete form and workflow definitions while preserving historical submissions and workflow audit trails.

Submit forms Submit available intake forms.

View forms View available form definitions.

Imports/Exports

Manage scheduled exports Configure and run scheduled customer-owned data exports.

Run imports Upload CSV files to import clients, matters, and parties.

View imports/exports View import/export center, export downloads, and import batch history.

Reporting

View reports View hardcoded operational reports.

Security

Manage security Manage teams, roles, and permission assignments.

Manage wall teams Create and maintain ethical-wall teams without granting access to ordinary security teams and roles.

Submissions

Approve submissions Approve or return workflow tasks.

Convert submissions Create client and matter records from submissions.

Edit existing client fields on submissions Override the read-only client-data guard when an intake submission reuses an existing client.

View all submissions View all submitted intake records.

View own submissions View submissions submitted by the user.

System

Impersonate users Temporarily view the app as another active user for support, routing, and approval testing.

Manage API applications Create, rotate, scope, and revoke tenant API credentials.

Manage maintenance rules Configure and run entity maintenance and health-check rules.

System administrator Full CMIForge platform access.

Time

Approve time Approve submitted time entries.

Create time Record time entries.

Edit time Edit existing time entries.

View all time View time entries across users, clients, and matters.

View own time View time entries recorded by the user.

Workflows

Design workflows Create and edit workflow definitions and steps.

View all workflow queues View all open workflow tasks.

View workflow queue View assigned workflow tasks.

Workflow Designer

Active CMIForge standard

Can design forms and workflows.

Assignments

Teams: 0
Direct users: 0
Permissions: 6

This role is managed by CMIForge Admin because app behavior depends on it.

Role permissions

Conflicts

Review conflict searches Record clearance, potential conflict, conflict, or needs-info decisions.

Run conflict searches Create party-based conflict search requests.

View conflict searches View conflict search requests and results.

Entities

Approve entity changes Approve or reject proposed changes to clients and matters.

Create entities Create clients, matters, and users.

Edit restricted entity sections Maintain sensitive entity panels such as aliases, relationships, links, notes, and archive actions.

Submit entity changes Submit proposed changes to clients, matters, and users.

View business entities View clients, matters, parties, and contacts.

View confidential documents View, preview, open, and download entity documents marked confidential.

View restricted entity sections View sensitive entity panels such as aliases, relationships, linked parties, notes, audit history, pending changes, and invite history.

View user entities View user profiles and their business relationships separately from client and matter data.

Environments

Access development environment Choose and work in the tenant development environment.

Access test environment Choose and work in the tenant test environment.

Forms

Design forms Create and publish form versions.

Form and workflow admin Retire obsolete form and workflow definitions while preserving historical submissions and workflow audit trails.

Submit forms Submit available intake forms.

View forms View available form definitions.

Imports/Exports

Manage scheduled exports Configure and run scheduled customer-owned data exports.

Run imports Upload CSV files to import clients, matters, and parties.

View imports/exports View import/export center, export downloads, and import batch history.

Reporting

View reports View hardcoded operational reports.

Security

Manage security Manage teams, roles, and permission assignments.

Manage wall teams Create and maintain ethical-wall teams without granting access to ordinary security teams and roles.

Submissions

Approve submissions Approve or return workflow tasks.

Convert submissions Create client and matter records from submissions.

Edit existing client fields on submissions Override the read-only client-data guard when an intake submission reuses an existing client.

View all submissions View all submitted intake records.

View own submissions View submissions submitted by the user.

System

Impersonate users Temporarily view the app as another active user for support, routing, and approval testing.

Manage API applications Create, rotate, scope, and revoke tenant API credentials.

Manage maintenance rules Configure and run entity maintenance and health-check rules.

System administrator Full CMIForge platform access.

Time

Approve time Approve submitted time entries.

Create time Record time entries.

Edit time Edit existing time entries.

View all time View time entries across users, clients, and matters.

View own time View time entries recorded by the user.

Workflows

Design workflows Create and edit workflow definitions and steps.

View all workflow queues View all open workflow tasks.

View workflow queue View assigned workflow tasks.