Skip to main content

Documentation Index

Fetch the complete documentation index at: https://grantmaster.dev/llms.txt

Use this file to discover all available pages before exploring further.

Role Guide: Auditor

Overview

Auditors are external users granted time-boxed, read-only access to an organization’s compliance and financial data. This role is designed for independent auditors, evaluators, and oversight personnel who need to review records without the ability to modify them.

How Auditor Access Works

  1. An Admin grants you access — they configure your email, access window (start and end dates), and scope (which modules you can view)
  2. You receive an email invitation with a secure login link
  3. You log in during the access window — access is automatically revoked when the window expires
  4. All your activity is logged — every page view and export is recorded in the audit trail

What Auditors Can Access

Compliance Dashboard (Read-Only)

  • Overall compliance score and historical trends
  • Category breakdown — financial, operational, reporting, and HR compliance
  • Active violations and resolution status
  • Upcoming compliance deadlines

Audit Logs (Full Access)

CapabilityDetails
View all audit eventsEvery significant action recorded in the system
Filter by criteriaDate range, user, entity type, action type, severity
Export logsDownload filtered audit logs for external analysis
SearchFind specific events across the entire audit trail

Financial Records (Read-Only)

DataAccess Level
ExpensesView all expense records, receipts, and approval history
BudgetsView budget allocations and actuals per project/grant
Financial reportsView and download generated financial reports

Time Records (Read-Only)

DataAccess Level
Journal entriesView all time entries across the organization
Monthly submissionsView submissions and approval status
Effort certificationView signed certification statements

Organization Information (Read-Only)

DataAccess Level
Team rosterView team members, roles, and assignment history
Organization profileView organization details and classification
Project informationView project details, phases, and milestones

What Auditors Cannot Do

RestrictionDetails
Create recordsCannot create expenses, journals, projects, or any other records
Edit recordsCannot modify any existing data
Delete recordsCannot remove any records
Approve/rejectCannot participate in approval workflows
Access billingCannot view subscription or payment information
Manage usersCannot invite, modify, or deactivate team members
Access AI featuresCannot use the AI Assistant or run agents
Access grants/pipelineCannot view grant discovery or pipeline data
Access outside windowCannot log in before the start date or after the end date

Common Auditor Tasks

1. Reviewing the Compliance Dashboard

  1. Navigate to Compliance > Dashboard
  2. Review the overall compliance score and trend
  3. Examine the category breakdown for areas below threshold
  4. Note any active violations for follow-up

2. Examining Audit Logs

  1. Go to Compliance > Audit Logs
  2. Set your date range filter to the audit period
  3. Filter by entity type (e.g., Expenses, Approvals) or severity (Critical, Warning)
  4. Review entries for:
    • Proper approval sequences (submitted → reviewed → approved)
    • Timely processing (no excessive delays)
    • Policy overrides (logged as critical events)
  5. Export the filtered logs for your records

3. Reviewing Expense Records

  1. Navigate to the Expenses module
  2. Filter by date range, project, or grant
  3. For each expense, check:
    • Receipt attachment is present and matches the claimed amount
    • Category is appropriate for the grant’s allowed expenses
    • Approval chain is complete (submitted → approved)
    • Compliance flags (the system marks policy violations automatically)

4. Reviewing Time Records

  1. Go to the Journals module
  2. Filter by date range and team member
  3. Review:
    • Monthly submission status (all months should be submitted and approved)
    • Effort certification signatures
    • Hours distribution across projects (check for reasonableness)
    • Any returned-for-revision entries and their resolution

5. Generating Compliance Reports

  1. Go to Reports > Report Builder
  2. Select Compliance Report
  3. Set the date range to your audit period
  4. Generate and download the report in PDF or Excel format
  5. This provides a structured summary of compliance scores, violations, and trends

Access Window

  • Your access is time-boxed — you can only log in between the configured start and end dates
  • When the window expires, your access is automatically revoked
  • If you need extended access, contact the organization’s Admin to create a new access grant (existing grants cannot be extended)
  • The Admin sets the scope of your access — you may not have visibility into all modules listed above

Tips for Auditors

  • Export audit logs early in your review — they provide the foundation for most audit procedures
  • Use filters extensively — the audit log can contain thousands of entries; narrow your view to what matters
  • Check for policy override events — these are logged as critical severity and indicate where standard processes were bypassed
  • Review effort certifications — they are a key compliance requirement for many donors
  • Download financial reports rather than manually compiling data — the Report Builder generates structured, consistent outputs
  • Note your access window end date — plan your review to complete before access expires

Permissions Summary

Auditors have read-only access to compliance, financial, and operational data within their configured scope and time window. They cannot create, modify, or delete any records. For the complete permission matrix, see the Permission Matrix.