Active users in the organization have full access to the application. They can conduct daily actions, register risks, create and run assessments, etc. These are usually associates from your risk, compliance, or audit team. Passive users have limited access to the application. They can view the reports, be action owners, register activities connected with their actions, initiate risk records and be assessment hosts