A person's user level determines how much their behaviour contributes to your BRI scores. Level 1 carries the most weight (largest impact assess and roles); Level 4 carries the least. This article shows you how to set or change a person's user level.
Set user levels via CSV
User levels are set using the CSV user management upload.
Go to People in the admin menu.
Click the Add people dropdown and select Upload CSV.
Click Download existing users to get a CSV of your current user list.
In the Risk level column, enter the appropriate level for each person:
1 — Largest impact. Senior leadership, finance, admins, anyone with broad access to sensitive systems or data.
2 — Privileged or sensitive-data access. Department heads, IT staff, finance team.
3 — Standard workforce access. Most people sit here.
4 — Low impact. Roles with limited system access or low-sensitivity work.
Save the file and upload it using the Choose file button.
Once processed, the new levels apply at the next BRI score refresh. The person's User BRI, and any Group and Organisation BRI they contribute to, will update at that point.
For full details on the CSV upload process, see How to manage users via CSV.
What if I don't set user levels?
BRI still works. People without an assigned level default to Level 3. But the score is most accurate when all four levels are populated. Level 1 and Level 2 are particularly important because model gives those levels significant weight regardless of how many people sit in them.