Rhythm includes three ready-made policies for Awards staff. Use this article to understand what each policy includes, where Awards checks a different permission than you might expect, and where it does not check a permission.
What It Controls
Every staff member who works in Awards needs a policy, or a custom role built from the same permissions, to open the Awards Console. After they can open the Console, the policy controls the daily tasks, setup screens, and reports they can use.
Where to Find It
You assign Awards policies the same way you assign any Console policy for your account, through your account's staff and security setup. This article explains what the three ready-made Awards policies include, not how to assign them.
Prerequisites
You need your account's security administration access to assign policies or build custom roles. Awards does not have a separate screen for this.
The Three Ready-Made Policies
| Policy | Console and setup access | Day-to-day actions | Reports and queries |
|---|---|---|---|
| Read-only | Opens the Awards Console. Cannot open account-wide Setup | Can view every Awards record. Cannot clone an award or process an application or nomination | Can run, download, and schedule delivery for every report |
| Day-to-day user | Opens the Awards Console. Cannot open account-wide Setup | Can view, create, edit, and delete nominations, nominees, and recipients; clone awards; and process applications and nominations | Can run, download, and schedule delivery for every report |
| Administrator | Opens the Awards Console and account-wide Setup, including award types, coupons, custom fields, forms, and page layouts | Includes everything in the day-to-day policy, plus complete control of every Awards setting | Full access |
Read-only staff can still run, download, and schedule every Awards report, even though they cannot change records. In Awards, read-only means read-only for records, not for reporting.
Every policy also includes the basic access staff need to open the Awards application and the Query Center. Without one of these three policies, or a custom role with the same base access, staff cannot open Awards. Each grant applies only within your own Rhythm account.
Cloning an Award and Processing Applications or Nominations
To clone an award or process its applications and nominations, you need the day-to-day user policy or the administrator policy. The read-only policy does not include either action.
A day-to-day user can open and change an award's own setup from inside the award, including its application, nomination, and reference processes, fees, and recipient categories. This is separate from account-wide Setup, which includes award types, coupons, and the custom fields, forms, and page layouts shared across every award. Account-wide Setup remains limited to Awards Administrators.
Coupons and Custom Fields
Two areas are administrator-only, even for staff who otherwise have full day-to-day access:
- Coupons and coupon codes. Only the administrator policy can create, edit, or delete coupons or their codes.
- Custom fields, forms, and page layouts. Only the administrator policy can administer custom fields, web forms, or page layouts on awards, nominations, nominees, applications, recipients, or references. Day-to-day and read-only staff cannot open those setup pages, even though they can work with the records themselves.
Reviews
If your account uses Awards reviews, review round and submitted review permissions are included in the same day-to-day and administrator access described above. A day-to-day user who can process an award's applications can generally also work with its reviews. Setting up review custom fields and review forms is administrator-only, along with every other account-wide custom field and form permission.
Assigned reviewers cannot currently recuse themselves from a specific application because of a conflict of interest; that capability does not exist yet. Reviewer decline behavior also depends on how the reviewer was assigned. It is generally supported for reviewers assigned directly to a submission, either by hand or through round-robin assignment, but not for reviewers who received the assignment automatically through a team.
If reviewers cannot download a file attachment from an application, the issue may be limited to specific reviewer accounts, assignments, or review buckets rather than affecting the whole account. Testing with an administrator account does not always reproduce an issue that is scoped to a particular reviewer or bucket. If you cannot reproduce it as an administrator, test with a non-admin reviewer account that has the same assignment before you rule out the issue.
Why the Reports Page Opens Without a Reports Permission
Every Awards staff member can open the Console's Reports menu item, no matter which policy they have. Today, that page does not check a permission, but the page itself has no content. Staff run their reports in the Query Center, and all three ready-made policies include access to it.
Change Impact and How to Revert
When you switch a staff member from one ready-made policy to another, the change takes effect the next time they load a page that checks the changed permission. You do not need to publish or roll out anything separately. If you remove a policy while someone is in the middle of a task, Rhythm does not undo anything they already saved; it only stops further access.
Related
- Clone an Award
- Coupons
- Run Standard Awards Reports