User Roles & Permissions
Plain-Language Quick Guide (By Health System Designation)
In DigitVA, access is organized around your real-world public health responsibilities. The table below maps common health system titles to their DigitVA roles, landing screens, and daily actions:
| Health System Designation | DigitVA Role Name | Primary Screen | Key Actions |
|---|---|---|---|
| ANM / ASHA / MPW | death_reporter |
Report a Death / My Registered Deaths | Register newly reported deaths in your village or sub-centre; view and update registered details before the family interview. |
| CHO / Staff Nurse | interviewer |
Collection (/collection) |
Conduct the WHO Verbal Autopsy family interview on web or mobile app; save drafts and submit completed interviews. |
| PHC Medical Officer | coder |
Coding Queue (/coding) |
Review family narratives and symptom responses; assign WHO ICD causes of death; recode within 24 hours. (If self-coding is enabled, can also interview and code immediately). |
| Block SMO / CHC In-charge | site_pi (In-charge) / interview_supervisor |
Intake Supervision (/supervision), Facility Dashboard (/sitepi) |
Oversee CHC and block field staff; supervise interviews; resolve flags, cancellations, and duplicate reports; optionally hold reviewer role. |
| District CMO / Civil Surgeon | site_pi (In-charge at District level) |
Facility & Area Dashboard (/sitepi, /area) |
High-level district health oversight; track mortality counts, cause-of-death breakdowns, and review operational progress across all blocks. |
| District / Block Programme Manager (DPM / BPM) | data_manager |
Data Manager Dashboard (/data-management) |
Manage health worker accounts and role grants; triage incoming cases; review data quality and sync status; export reports and spreadsheets. |
| Medical College Faculty / Resident | Mentoring Mentor (coder, reviewer) |
Mentoring Portal (/app/mentoring), Coding / Review Queues |
Provide academic mentoring to partner districts; code complex cases and perform independent quality reviews. Listed separately from district headcount. |
| Medical College Nodal Admin | College / Institute Admin | Mentoring Portal (/app/mentoring) |
Add and remove medical college faculty and resident accounts; view supported partner districts. |
"Within Area" vs. "All" Scope Explained:
- Within Area (e.g.,
Within Area: Ballabgarh CHCorWithin Area: PHC01, PHC02): Your access is confined to that specific health facility/area and all sub-centres and villages under it (or the specific cross-area facilities assigned to you). You only see deaths and take actions within your assigned health area. - All: Your access spans the entire project across all districts and facilities. This scope is reserved for State Nodal Officers, Project Principal Investigators, and Central System Administrators.
How access works
A person can do something in DigitVA only through a grant: one role at one scope.
- Scope is where the role applies: the whole project, one site of a project, or one organization unit (for example a district or CHC) and every unit below it. An administrator's grant is global. In the grant forms these scopes are named
project,project_site,org_unitandglobal. - Roles add up. A person may hold several grants; they can do everything any of them allows. There is no "deny" grant, and roles do not include each other (a reviewer is not automatically a coder).
- The level × cadre grid only limits. On the Organization setup page, the grid says which roles a cadre may be given at each level. It never gives access by itself. A
codergrant on a unit needs a cadre allowed to Code VA at that level; aninterview_supervisorgrant needs a cadre allowed to Supervise interviews there. The District reference model card on that page shows the suggested roles for each cadre. - Closed projects: grants on a project that is not active open nothing until the project is reopened.
- Area dashboard: everyone with at least one grant can open the Area dashboard (
/area), which shows counts only (no case lists, no personal details) for the part of the project they hold a grant on.
Summary
Click a role for details. "Yes" means the role can do it inside its own scope. Personal details means names and identifiers of the deceased and respondent, and who collected, coded or reviewed a death.
| Role | Register deaths | Interview | Supervise intake | Code | Review | Test coding | Manage data | See personal details | Read-only dashboards | Manage users / grants | Allowed scopes |
|---|---|---|---|---|---|---|---|---|---|---|---|
| admin | – | – | – | Demo only | – | – | Partly | Yes | Yes | Yes, all | global |
| project_pi | – | – | – | – | – | – | – | Yes | Area only | Own projects | project |
| site_pi (In-charge at a unit) | – | – | In-charge | – | – | – | In-charge | Yes | Yes | – | site, unit (In-charge) |
| data_manager | – | – | Yes | – | – | – | Yes | Yes | Yes | Coders, testers, data managers; in organization projects also interviewers, reviewers, viewers | project, site, unit |
| collaborator | – | – | – | – | – | – | – | No | Yes | – | project, site, unit |
| collaborator_pii | – | – | – | – | – | – | – | Yes | Yes | – | project, site, unit |
| coder | – | – | – | Yes | – | – | – | Yes | Area only | – | project, site, unit |
| coding_tester | – | – | – | Yes | – | Yes | – | Yes | Area only | – | project, site, unit |
| reviewer | – | – | – | – | Yes | – | – | Yes | Area only | – | project, site, unit |
| interviewer | Yes | Yes | – | – | – | – | – | Yes | Area only | – | project, site, unit |
| interview_supervisor | – | – | Yes | – | – | – | – | Yes | Area only | – | unit only |
| death_reporter | Yes | Never | – | – | – | – | – | Own deaths | – | – | unit only |
Roles
admin
For: the people who run the DigitVA installation. Scope: global only.
- Can: use the Admin panel (
/admin) to create and edit users, projects, sites, project-site settings, forms, organization setup, translations, ICD and definition data and devices; give or remove any grant, including admin and project PI; return a finalized case to coding (override-to-recode); start demo coding; run and schedule ODK syncs; open the Data Manager dashboard and submission view, run screening, and accept or reject changes made in ODK. - Cannot (without another grant): register deaths, interview or supervise intake; review. The coding dashboard opens, but real cases need a coder grant.
- Personal details: yes.
- Granted by: another admin.
project_pi
For: the principal investigator or programme lead of a project. Scope: one whole project.
- Can: use the Admin panel (
/admin) for their own projects: project-site settings, the Organization setup page (levels, units, cadres and the grid, workers, export and import), and access grants; give any role except admin and project_pi in their projects, including unit grants; import users from a spreadsheet, which attaches roles to people who already have an account. See the Area dashboard for the whole project. A project PI who also holds a coder grant is exempt from that project's coding on/off switch, date window and daily limit. - Also: open the Site PI dashboard (
/sitepi) for every site of their projects and, in an organization project, its top-level units. In an organization project a project PI also has every data-manager power over the whole project and supervises its web intake (/intake/supervision). - Cannot: create new user accounts; give admin or project_pi grants; code, review or interview unless also granted those roles. In a site project, no data-manager actions and no intake supervision.
- Personal details: yes, on any screen the person can open.
- Granted by: an admin.
site_pi
For: the lead investigator or officer for one site. Scope: one site of a project, or, in an organization project, an organization unit, where the role is shown as In-charge (District in-charge, Block in-charge, PHC in-charge).
- Can (site): open the Site PI dashboard (
/sitepi): totals of submissions, cases with an agreed cause of death, not-codeable cases, and each coder's completed and corrected work for their sites. See the Area dashboard. A site PI who also holds a coder grant is exempt from that site's coding switch, date window and daily limit. - Can (In-charge, within their unit and everything below it): every screen with personal details; every data-manager power (the Data Manager dashboard, Not Codeable, screening, changes made in ODK, re-syncing one submission, placing unrouted submissions); supervise web intake (
/intake/supervision); the Site PI dashboard for their unit. - Cannot: code, review or interview without those grants. A site PI on a site cannot change data, supervise intake or manage users. An In-charge cannot re-sync a whole form. Staff of a mentoring institute can never be an In-charge.
- Personal details: yes.
- Granted by: an admin, or a project PI of the project.
data_manager
For: the person who keeps the data clean and the work moving (for example a District or Block Programme Manager). Scope: project, site, or organization unit.
- Can: open the Data Manager dashboard (
/data-management, their landing page): browse and filter all submissions in scope, open a submission read-only, mark it Not Codeable, pass or reject it in screening, accept or reject changes made in ODK, re-sync a form or a submission from ODK, open it in ODK's editor, place unrouted submissions in the right unit, download CSV exports, see KPI and coder statistics and cause-of-death groupings. Supervise web intake (/intake/supervision): see cases, resolve flags, cancel, reopen, mark duplicates. Create users and give or remove grants inside their own scope (Users page,/data-management/users): in a site project,coder,coding_testeranddata_managerat their own project or site scope; in an organization project,interviewer,coder,reviewer,coding_tester,collaboratorandcollaborator_piiat any level of their area, anddata_manageronly below their own level. A grant on an organization unit covers that unit and everything below it on every screen. - Cannot: register deaths or interview; code or review; make anyone an In-charge,
interview_supervisor,site_pi,project_pioradmin; give a grant outside their own scope. A data manager on an organization unit cannot re-sync a whole form, only one submission. - Personal details: yes.
- Granted by: an admin, a project PI, an In-charge (their own unit and below), or another data manager (in an organization project, only below their own level).
collaborator (shown as "Viewer")
For: partners and observers who need to follow progress without seeing who anyone is. Scope: project, site, or organization unit.
- Can: open the Data Manager dashboard (
/data-management) read-only: the submission list, filters and counts. See the Area dashboard. - Cannot: open a single submission, change anything, download exports, code, review, interview or manage users. The KPI page opens but shows no data yet.
- Personal details: no. Names and identifiers, and who collected, coded or reviewed a death, are hidden. A person who also holds any other role sees them.
- Granted by: an admin, or a project PI of the project.
collaborator_pii (shown as "Viewer (with PII)")
For: someone who must follow the work and know who did what for which death (for example a District Epidemiologist). Scope: project, site, or organization unit.
- Can: exactly what a collaborator can.
- Cannot: exactly what a collaborator cannot, except personal details.
- Personal details: yes. Give this role only when the person's work needs it.
- Granted by: an admin, or a project PI of the project.
coder
For: doctors who assign the cause of death. Scope: project, site, or organization unit (a unit grant needs a cadre allowed to Code VA at that level).
- Can: open the Coding dashboard (
/coding, their landing page); take the next case or pick one, code it and submit the cause of death; resume their own unfinished case; recode their own case within 24 hours; look up ICD codes and definitions. Only cases in their scope, in their coding language, at sites where coding is switched on, within the coding dates and under the daily limit. - Cannot: review, change submission data or manage users.
- Personal details: yes.
- Granted by: an admin, a project PI, a data manager or an In-charge, within their own area.
coding_tester
For: people checking that coding works before or outside the live coding period. Scope: project, site, or organization unit.
- Can: everything a coder can, and code even when the site's coding is switched off, outside its coding dates, and beyond its daily limit.
- Cannot: review, change submission data or manage users.
- Personal details: yes.
- Granted by: an admin, a project PI, a data manager or an In-charge, within their own area.
reviewer
For: senior doctors who independently code a sample of cases a second time. Scope: project, site, or organization unit.
- Can: open the Reviewer dashboard (
/reviewing, their landing page); start a review, resume their own, and submit their cause of death. A case opens for review only after the coder's 24-hour recode window has closed. - Cannot: do first coding (that needs a coder grant), change submission data or manage users.
- Personal details: yes.
- Granted by: an admin, or a project PI of the project.
interviewer
For: staff who visit the family and fill in the verbal autopsy questionnaire (for example a Staff Nurse or CHO). Scope: project, site, or organization unit.
- Can: use web intake (
/intake, their landing page) and the DigitVA mobile app: register a death, check possible duplicates, flag a case, set the next visit, log contact attempts, pause an interview, start, save, discard and submit an interview. - Cannot: supervise other interviewers' cases, code, review or manage users.
- Personal details: yes; they collect them.
- Granted by: an admin, or a project PI of the project.
interview_supervisor
For: officers who oversee interviewers in their area (for example a Senior Medical Officer of a CHC). Scope: organization unit only, with a cadre allowed to Supervise interviews at that level.
- Can: open intake supervision (
/intake/supervision) for cases in their unit and every unit below it: see the cases, resolve flags, cancel, reopen, and mark duplicates. - Cannot: register deaths or interview (that needs an interviewer grant), code, review or manage users.
- Personal details: yes.
- Granted by: an admin, or a project PI of the project.
death_reporter
For: field workers who report a death but do not interview (for example an ANM or MPW at a sub-centre, an ASHA at a village). Scope: organization unit only, with a cadre allowed to Report deaths at that level.
- Can: in the DigitVA mobile app, register a death, see the list of the deaths they registered, and correct the details of one of them until an interview of it is completed.
- Cannot: start or resume an interview, log contact attempts or visits, see anyone else's cases, code, review or manage users. On the web their one page is Report a death in the top menu.
- Personal details: only of the deaths they registered.
- Granted by: an admin, a project PI of the project, an In-charge or a data manager (inside their own subtree).
Within-Tree vs. Cross-Tree Coding & Supervision
In organization-mode projects (for example District > CHC > PHC-AAM > SC-AAM > Village), DigitVA supports both within-tree and cross-tree assignment of Medical Officers (Coders) and Interview Supervisors:
- Own unit (Within-tree): By default, a worker assigned to a unit (e.g.
PHC01) codes or supervises VA forms fromPHC01and every sub-centre/village beneathPHC01. - Other units at this level (Cross-tree): In Organization → 4. Workers & Scope, you can configure a PHC Medical Officer or Supervisor to code/supervise other PHCs outside their own unit subtree so they do not code deaths from their own facility.
- All units at this level: Grants the worker coding or supervision access across every active unit at their level (e.g. all PHCs in the district).
- Custom selected units: You can tick any specific combination of units per worker — for example, assigning 2 PHCs to one Medical Officer and 10 PHCs to another Medical Officer.
- Project-wide Coding Scope boundary: Under Project Setup → Coding (or Organization → 1. Levels → Coding scope), you can also set a project-wide Coding confined within level (for example, Block/CHC or District) and specify whether people granted above that level have
view_onlyorcode_anyaccess.
Question-Driven Cadre Setup ("Who can do what?")
In Organization → 3. Cadres & permissions → b. Who can do what?, you can configure cadre capabilities either via the full-width Level × Cadre matrix or by clicking Level · Cadre pills under each plain-language question:
- Who can report deaths? Enables
can_report_deathsand pre-selects thedeath_reporterrole. - Who can conduct VA interviews? Enables
can_fill_va_formand pre-selects theinterviewerrole. - Who can supervise interviews? Enables
can_supervise_interviewsand pre-selects theinterview_supervisorrole. - Who can code VA forms? Enables
can_code_va_formand pre-selects thecoderrole. - Who can review coded VAs (QA)? Pre-selects the
reviewerrole. - Who is Unit / Facility In-charge? Pre-selects the
site_pi(In-charge) role. - Who is a Coding Tester? Pre-selects the
coding_testerrole.
Examples
- A coder with a grant on site NC01 of project UNSW01 codes NC01's cases only, not TR01's in the same project.
- A coder with a grant on project UNSW01 codes cases from every site of that project.
- A coder with a grant on a district unit codes cases from that district and every CHC, PHC and subcentre below it.
- A PHC Medical Officer at PHC01 configured with Custom coding units: PHC02, PHC03 codes deaths from PHC02 and PHC03 (cross-tree) while holding their home roster position at PHC01.
- A Senior Medical Officer granted
interview_supervisorandrevieweron a CHC supervises interviews in the CHC's area and reviews its cases; neither grant lets them interview.
Existing Users & One-Scan Expo Mobile App Onboarding
- Existing DigitVA users across projects: When adding a worker in Organization → 4. Workers & Scope, typing an email address or 10-digit mobile number automatically checks whether that person already has a DigitVA account (for example from another project). If found, DigitVA links their existing account and adds the new project's grants without resetting their password.
- Expo mobile app QR onboarding: Click the QR icon on any worker row (or Project App QR in the Workers toolbar) to display a one-scan QR code for the DigitVA mobile app.
Coding language
Coders and reviewers also see only cases whose narration language matches the coding languages on their user profile. A grant alone is not enough.
Who manages grants
- Admin — every grant, everywhere, and all user accounts.
- Project PI — every role except admin and project_pi, inside their own projects, from the Admin panel's access grants, the Organization page's Workers & Scope drawer, Mentoring & Scientists tab, or user import.
- Data manager and In-charge — new users and grants inside their own area: in a site project,
coder,coding_testeranddata_managerat project or site scope; in an organization project,interviewer,coder,reviewer,coding_tester,collaboratorandcollaborator_piiat any level of their area, anddata_managerbelow their own level (an In-charge also at its own level).