Roles and sensitive data

GeoTract uses least-privilege access. A person may be able to view a module without being able to edit it.

Access	Typical capability
Read-only	Search, open, and review permitted records
Module editor	Create or update records in an assigned business area
Sensitive-data reader	View separately protected acquisition or personal data
System administrator	Manage application-wide configuration and access

Sensitive-data access is separate from ordinary edit access. Do not copy protected values into an unprotected note, export, email, or support ticket.

If a control is missing or disabled, record the page and intended task and contact your administrator. Request the narrowest role that supports your job.