In Cenedril only the designated persons of the reporting office see reports and cases; no role key opens the area, not even the owner role or the administration. For single cases the reporting office brings in supporting persons for a limited time. If the reporting office fails, owners or administrators trigger an emergency access under Team → Access Control; it takes effect after 24 hours and is logged in full.
Overview in the access control
Open the Whistleblower protection card
Open Team and switch to the Access Control tab. The Whistleblower protection card is there in every plan. Under Reporting office you find the designated persons with access to reports, with role and start; To the designation leads to step 2 of the setup. Under Emergency accesses every trigger stays listed permanently with reason, expertise, time and state (Waiting, Active, Revoked, Expired); the number next to it counts the open ones.
Know the view outside the reporting office
Whoever does not belong to the reporting office sees under Wizards → Whistleblower Protection the cards Reporting office with the designated persons and Submit a report with the state of the portal, anonymous reporting, the phone number with hours and the meeting. A notice says that only the reporting office sees cases; owners and administrators also read the way to the emergency access there. For them the setup is locked as soon as the reporting office is staffed and shows that the reporting office is staffed, with the names and To the emergency access in the access control.
Trigger an emergency access
Record the reason
In the Whistleblower protection card click Trigger emergency access. In the window choose the Reason: Failure of the reporting office, Vacant designation or Inactivity while a statutory deadline is running. Enter the Explanation and the Note on expertise; both stay in the protocol. The window lists the consequences before you confirm with Trigger.
Extend or end the emergency access
While the emergency access is waiting or active, the list shows it with effective from … or until …. Extend requires a new reason and 1 to 30 days, notifies the reporting office again and also takes effect after 24 hours. Revoke ends the emergency access immediately; running cases pass to a person of the reporting office.
Bring a person into a case
Grant access in the case
As a person of the reporting office, open the case. The card Responsibility and access names the Assigned person, Your access and, under Granted access, everyone outside the reporting office with access to this case. Click Grant access, choose a Person from the supporting list, enter Reason and End and confirm with Grant.
The view of the person brought in
The person brought in sees only the granted cases on the Whistleblower protection page, with the notice that they see only the cases for which the reporting office has granted them access, at the latest until the end date. While the waiting period runs, the page says when the access takes effect and when it ends.
Result: The reporting office works alone in its cases, brings people in selectively and for a limited time, and every access outside the designation is justified, announced and traceable in the protocol.