Auditee groups must upload evidence for fieldwork tasks. What permission boundary should remain in place?
Select an answer to reveal the explanation.
Short Explanation
Auditees can drop the documents in the inbox; they shouldn’t stamp the case Closed themselves. Task them for evidence, keep finding closure with Audit. That’s the permission boundary.
Full Explanation
Auditee personas are commonly tasked to supply evidence and responses while finding validation and closure remain under audit control. Allowing unilateral finding closure, audit-manager rights for auditees, or platform admin for convenience removes necessary segregation in the audit role model.