...
To access the risk menu, you must be a risk Risk owner, risk Risk group owner or Risk Administrator.
The risk evaluations will be shown in process maps if the evaluations are tagged with process. Thus, all of these will be visible to end users.
Risk editing right
Only users with access to the Risk menu, may create new Risk groups / Risks
Only these can edit risk groups: Risk group owner, Substitutes.
These can edit risks: Risk owner.
These can evaluate a risk for the first time (new outcome): anyone who can access the risk home menu.
Even if a person cannot edit a risk, they can enter read mode - find the risk and evaluate it with your relevant outcome.
...