There are five different access levels and an additional optional permission that users assigned to a cancer group can receive.

Admin (short for Cancer Group Administrator) — This role grants to the user the ability to perform administrative functions in the cancer group, including all of the necessary administrative tasks relating to setting up studies and user permissions (including study-related permissions) within the cancer group. Also, only a Cancer Group Administrator may remove a patient from a cancer group once that patient has been registered with that group — see Removing a Patient Record from a Cancer Group Database. A Cancer Group Administrator may also view/edit any of CCR's dictionaries that are specifically associated with the cancer group — see Dictionaries.

Writer — This role allows a cancer group user to add to or edit patient data, including data stored in cancer group-specific fields, for patients registered in the cancer group. When logged in under a Clinical or QA session purpose, they can also register new patients into the cancer group — see the Clinical QA permission below and Adding a Patient.

Clinical QA — This role allows a user to sign into CCR with a session purpose of Clinical or QA (Quality Assurance) for this cancer group. When signed in under one of these session purposes, users are allowed to view patient identifying information, such as the patient's name or MRN, so this role should only be granted to those users who should be allowed to view this information for all patients registered in the cancer group.

General Research — This role allows a user to sign into CCR with a session purpose of Research/General for this cancer group. Whenever a user is signed in under this purpose, the information viewed will be de-identified, regardless of what other security roles the user has been granted in the cancer group.

Study Only — This role only allows a user to sign into CCR with a session purpose of Research/Study for this cancer group. If the user belongs to another cancer group, they may have access to other session purposes relative to that cancer group, but when signing in under the current cancer group, they may only access data under a specific study.

iQ — This role allows a cancer group user to use the iQ tool to design, create and run iQ reports based on patient data associated with the cancer group — see iQ Reports for more information. This role is unique in that it is assigned separately in addition to the other roles a user might have. In other words, a user have both Writer and iQ roles.