DekkoDEMS uses a simple two-role model. Every user in a Tenancy is either a General User or a Tenancy Manager. All access and policy management is configured at the tenancy level.
General User
A General User is the standard role for most users in a DekkoDEMS tenancy. This role is intended for day-to-day digital evidence management tasks such as creating, sharing and accessing cases.
What a General User can do
- Log in and access the DekkoDEMS platform
- Upload evidence files and folders
- View and download evidence that has been shared with you. The specific case level permissions depends on how it has been shared either as view only, download, download + upload, editor, manager or full permissions.
- Create new cases
- Share evidence with other users within the tenancy
- Use DekkoDrive to sync evidence locally
- Use search to find evidence within cases you got access to
- View or export audit logs for files you got access to
- Invite new users to the Tenancy
What a General User cannot do
- Access tenancy-level settings or configuration
- Add or remove users from the tenancy
- View users lists
- Change another user's role
- View audit logs for users or activity outside of their own cases
A General User's access to specific cases and evidence depends on what has been explicitly shared with them. DekkoDEMS uses an explicit sharing model: users only see content that has been directly shared with them directly or via access groups or what they have uploaded themselves.
Tenancy Manager
A Tenancy Manager has full administrative control over the DekkoDEMS Tenancy. This role is responsible for managing users, configuring Tenancy settings, and overseeing platform usage.
What a Tenancy Manager can do
Everything a General User can do, plus:
- Delete users from the tenancy
- Invite Tenant Admins
- View and manage tenancy-level policies, such as enforcing 2FA, managing tags, attributes and profiles
- View tenancy-level audit logs and user activity
What a Tenancy Manager cannot do
- Access the content of evidence files unless that evidence has been explicitly shared with them via access groups or directly
- Delete the tenancy itself (contact DekkoSecure support if you wish to do so)
- DekkoSecure staff sets up the tenancy and assigning the first Tenancy Manager of your organisation
Being a Tenancy Manager does not automatically grant access to all evidence in the tenancy. You must be explicitly added to a group, a case or have evidence shared with you, the same way as any other user. This separation protects evidentiary integrity and chain of custody.
How roles are assigned
- The first Tenancy Manager is assigned by DekkoSecure during initial tenancy provisioning.
- A Tenancy Manager can promote any General User to Tenancy Manager, or demote an existing Tenancy Manager to General User.
- From the general Invite users button, new users are invited as General Users by default.
- If you wish to invite a new Tenancy Manager you can go to the Tenancy Manager in the top right corner, chose the Users tab, click the Invite Tenant Admin and type their email address. The user can be already exciting or a new user to do this.
- There must always be at least one Tenancy Manager in a tenancy.
To change a user's role or invite a new Tenancy Manager
- Log in as a Tenancy Manager.
- Click on the profile in the top right corner and then chose Tenancy Manager.
- Chose the Users tab in the left navigation panel.
- Under the status column you can see if the user got is a Tenancy Manager if they have they star.
- If you wish to add Tenancy Manager privileges to a current user or invite a new user, click the Invite Tenant Admin button in the top right corner.
- Type their email address.
- Save to confirm the change.