Roles and permissions in Viedoc TMF

  • Published by Viedoc System 2025-03-26
  • Print

Note! This page contains information and instructions for the new TMF user interface. If you are using the old interface, please go to the relevant user guides:

Want to browse more information for the new interface? Please go to the new TMF user guides:


Introduction

In Viedoc TMF, roles and permissions determine what a user can or can't see in the application, which actions they can perform, and which records they can access. Proper role assignment ensures secure and efficient record management while maintaining compliance with regulatory requirements.


Viedoc system and clinic roles that can access Viedoc TMF

In Viedoc, there are two types of roles:

  • System roles are predefined by Viedoc and cannot be changed, and give access to various features in Viedoc Admin and Viedoc Designer.
    • The Study Manager is the only system role that can assign the eTMF Manager role to a user in Viedoc Admin.
    • The eTMF Manager is a system role that can manage the TMF settings in Viedoc Admin, map clinic roles to TMF roles, and access the TMF admin rea in the TMF application.
  • Clinic roles (sometimes called study roles or EDC roles) can be customized to each individual study. These roles give access to Viedoc Clinic.
    • The eTMF manager can map specific TMF roles and permissions to the different clinic roles, creating customized role-based access. See the Mapping roles section below for instructions on how to do this.

See About roles in Viedoc for more information about system and clinic roles in Viedoc.

TMF roles, which are different from Viedoc system and clinic roles, are described in the next section.


Viedoc TMF roles and permissions

The user access to Viedoc TMF is determined by the assigned roles and permissions. TMF roles and permissions can work in combination or independently.

TMF Levels and permissions

Depending on the permission associated with your user role, you can perform different actions on records. Your user role can have permission (no access, read, write, or review) on these TMF levels:

  • Study/trial
  • Country
  • Site

These levels and permissions need to be explained better

You can only see and access records if you have permissions for the artifact on the corresponding TMF level.

For example, if an artifact is linked to two sites, a user with write permission for the artifact for only one of the sites will be able to read but not edit the record. This is due to the fact that the user does not have write permissions for all sites that the record is linked to.

The eTMF Manager role

The eTMF Manager is a Viedoc system role (see above) and has permissions to manage the TMF application in Viedoc Admin and to manage templates in Viedoc TMF.

The TMF user roles

The user access to Viedoc TMF is determined by the assigned roles and permissions. The roles and permissions can work in combination or independently. These user roles are defined in the template, which is maintained by the eTMF Manager.

The TMF roles are:

  • Site staff
  • Sponsor study
  • Sponsor country
  • Sponsor site
  • Reviewer
  • Sponsor Data Manager
  • Sponsor unblinded

The respective permissions for these TMF roles are specified in the Excel template file, on the Role sheets. For more information, see the Roles sheets section in the Customizing a template lesson.

The TMF permissions

These permissions are defined in Viedoc Admin and are assigned to users by the eTMF Manager. See Assigning roles and permissions in Viedoc Admin below for instructions on how to do this.

Permissions in Viedoc TMF can work in combination with roles or independently, providing granular control over user actions:

Archive sponsor TMF

Allows users to access the TMF Archive view and archive artifacts that are listed as Sponsor side.

(This is set in the Edit artifact window or in the template file on the sheet V 3.1.0, column M Sponsor Document).

Archive investigator TMF

Allows users to access the TMF Archive view and archive artifacts that are listed as Investigator side.

(This is set in the Edit artifact window or in the template file on the sheet V 3.1.0, column N Investigator Document).

Read-only TMF Admin

Allows user to inspect the structure, templates, and other settings in the TMF Admin view in read-only mode.

A user with this permission can access the TMF Admin view and is able to:

  • View a selected/instantiated structure
  • Export templates and structure
  • View the settings tab
Read-only Trial Master File

Provides users read-only access to all the published records in the Trial Master File view.

Note! If this permission is assigned in combination with a TMF role, the no access permission, set in the template file for that specific role, will be overridden by read access by the system.

Download audit trail Allows users to access the TMF Archive view and generate and download the complete audit trail report.
Manage drop zone Allows users to manage the files in the shared Drop Zone.
Manage record sharing for Viedoc Clinic users Allows users to share records with Viedoc Clinic users.
Manage record sharing for Viedoc Me users Allows users to share records with Viedoc Me users.

For TMF access use cases and frequently asked questions, please see TMF access use cases.


Assigning Roles and Permissions in Viedoc Admin

Viedoc TMF user roles are assigned and managed in Viedoc Admin.

Only the eTMF Manager has permission to assign and manage TMF user roles for a specific study.

Mapping clinic roles to TMF roles and permissions

To map the Viedoc clinic roles to TMF roles and permissions:

1

Go to Viedoc Admin, and select a study to open the study overview page:

2

Select the eTMF settings button:

3

In the eTMF roles mapping area, select the TMF role(s) and/or permission(s) that you want to map to the Viedoc clinic (study) roles:


Note! The Viedoc study roles correspond to the Clinic roles for the study, and are set in the study design. The TMF roles correspond to the roles specified in the TMF template file. You can map a study role to one or several TMF roles and permissions.

4 Select Save changes.

Modifying and revoking roles

  • To modify a role, follow the same steps above and select a new role or permission.
  • To remove a user’s access, follow the same steps above and remove the role or permission from their associated study role.

Best practices for assigning permissions

  • Assign roles based on job responsibilities—avoid giving excessive permissions.
  • Regularly review user roles to ensure compliance and security.
  • Use custom roles when predefined options don’t meet operational needs.
  • Limit eTMF Manager access to only those responsible for system-wide TMF settings.

Back to top of page


TMF roles, permissions and tasks

The following table lists several examples of tasks that study users can face, together with the TMF roles, the Viedoc Clinic site groups, and the TMF level access that they would need to perform the respective task.

For more information about site groups, see Managing users and Managing study sites in the Viedoc Admin User Guide.

Study role Task TMF role Viedoc Clinic site group TMF level access Permissions Comments

Study coordinator

General site user

Drop records in the shared drop zone Site staff - customized with no access for all artifacts Site No access to all artifacts None

Study coordinator

General site user

View, file, and classify site-level records, view some artifacts on country and study levels, archive the Investigator site TMF Site staff Site Write access to pre-defined artifacts on site level, read access to pre-defined artifacts on study, site, and country levels 1. Archive Investigator TMF
Project manager File study-level records, view all sponsor-side records, archive the sponsor TMF, download audit trail, and see TMF settings and structure Sponsor study All production sites*

1. Download audit trail

2. Archive sponsor TMF

3. Read-only TMF Admin

*Clinic access needs to be on study level and not every site one by one, otherwise the write permission will be translated to read permission.
Monitor File site-level records, view all records for the study, my country, and my site, manage drop zone records, review site level records

Sponsor site

Reviewer*

Site**

Write and review access on site level

Read access on all levels

1. Manage drop zone

*Although the role sheet grants review rights for study and country level records too, the end user will only have read rights to those records, as long as they are not invited on study or country level for their clinic role.

**Clinic access needs to be given to all applicable sites.

Country manager

Trial manager

File country-level records, view all sponsor-side records at all levels and review all records

Sponsor country

Reviewer

All production sites* *Clinic access needs to be on study level and not every site one by one, otherwise the review permission will be translated to read permission.

Read-only role

Regulatory inspector

Read-only access to all records* and settings

Access to audit trail

No role, permissions only All production sites**

1. Read-only Trial Master File*

2. Read-only TMF Admin

3. Download audit trail

*If read-only Trial Master File permission is assigned, any NO ACCESS permission will be overridden by read access by the system. This means that all artifacts set as optional or required (including blinded and investigator-side artifacts) will be visible. These permissions should be reserved for a role that requires all access, such as a regulatory inspector.

**Clinic access needs to be on study level and not every site one by one, otherwise the review permission will be translated to read permission.

Unblinded role

Sponsor or statistician

View, file, and classify blinded records only on all levels Sponsor unblinded All production sites*

Write access to blinded records on study level and site level (when applicable)

No access to non-applicable records on all levels

1. Download audit trail *Clinic access needs to be on study level and not every site one by one, otherwise the review permission will be translated to read permission.

For TMF access use cases and frequently asked questions, please see TMF access use cases.


Back to top of page