In general
To access the risk menu, you must be a Process owner, Risk owner, Risk group owner or Risk Administrator.
All may access the Risk menu
The risk evaluations will be shown in process maps if the evaluations are tagged with process. Thus, all of these will be visible to end users.
Risk editing right
All regular users users who has access to "Create new" can create new Risks and Risk Groups. The various rights groups are defined in a separete settings.
All regular users can create Risks, but they can only be linked to risk groups that they have the role as Risk owner or deputy.
Only users with access to the Risk menu, may create new Risk groups / Risks
Only these can edit risk groups: Risk group owner, Substitutes.
These can edit risks: Risk owner.
These can evaluate a risk for the first time (new outcome): anyone who can access the risk home menu.
Even if a person cannot edit a risk, they can enter read mode - find the risk and evaluate it with your relevant outcome.
...