Managing Incidents

Once incidents are created, they need to be reviewed, updated, and eventually resolved. This guide covers the actions available for managing existing incidents.

Viewing Incidents

Navigate to the Incidents section to see a list of incidents. The list is filtered based on your role and property access — you will only see incidents for properties you have access to.

Filters

You can filter the incident list by:

• Property
• Date range
• Incident type
• Status (open, resolved, critical)

Editing an Incident

To edit an incident, open it and make changes to any field. The form is the same as the creation form, except the property cannot be changed after creation.

Required permission: incidents:update + access to the incident’s property.

Adding Comments

On an existing incident, use the Comments section to add notes, updates, or observations. Comments are timestamped and attributed to the user who created them, forming an audit trail.

Marking as Critical

Critical incidents require immediate attention. To mark an incident as critical:

1. Open the incident.
2. Click the Mark Critical action.
3. The incident will be flagged and the CIRT team will be notified.

Required permission: incidents:mark_critical + access to the incident’s property.

The following roles can mark incidents as critical:

• Site Manager
• Regional Supervisor
• Director
• CIRT Member
• System Administrator

Resolving an Incident

To resolve an incident:

1. Open the incident.
2. Add a summary of actions taken if not already documented.
3. Click Resolve.

The system records who resolved the incident and when.

Required permission: incidents:update + access to the incident’s property.

Deleting and Restoring

Incidents are soft-deleted — they are hidden from the default list but not permanently removed.

• Delete: Requires incidents:delete + property access.
• View deleted: Requires incidents:view_deleted permission.
• Restore: Requires incidents:restore + property access.

Attachments

You can add or remove attachments on existing incidents:

• Upload new files (photos, documents, videos).
• Update attachment metadata (type, description).
• Remove attachments that are no longer relevant.

Permission Summary by Role

Action	Site Staff	Site Manager	Regional Supervisor	Director	CIRT Member	System Admin	External Partner
View	Yes (own property)	Yes (own property)	Yes (assigned properties)	Yes (all)	Yes (all)	Yes (all)	Yes (assigned properties)
Create	Yes	Yes	Yes	Yes	Yes	Yes	No
Edit	No	Yes	Yes	Yes	Yes	Yes	No
Delete	No	Yes	Yes	Yes	Yes	Yes	No
Restore	No	Yes	Yes	Yes	Yes	Yes	No
Mark Critical	No	Yes	Yes	Yes	Yes	Yes	No
View Deleted	No	Yes	Yes	Yes	Yes	Yes	No