Open-AudIT has a granular permissions system to determine what a user within Open-AudIT can do, and the items he can do it too. Open-AudIT can be entirely self-contained, or use Active Directory or OpenLDAP for authentication and/or authorization.
It’s entirely up to the administrator of Open-AudIT how they would like the Role Based Access Control to work.
The process of creating a role is outlined in the attached video.