Roles and Permissions
Managing roles and permissions for users
Roles and Permissions
Access across the platform is controlled through a flexible roles and permissions system. Rather than using fixed roles, your organisation creates custom roles and assigns the specific permissions each role needs. This gives you full control over who can do what across your document sets.
Two types of roles
The platform uses two distinct types of roles that work together to control access at different levels.
User roles
User roles define what a user can do across the platform as a whole, regardless of which course they are working in. They control organisation-wide capabilities such as whether a user can manage organisation settings, view all users and students, or access all courses without being explicitly assigned to them.
User roles are created and managed in the organisation settings area. Each user in the organisation is assigned one user role.
Course/Module roles
Course/module roles control what a user can do within a specific course. All of the workflow permissions, uploading documents, managing reviewers, approving for printing, and so on, are course role permissions. This means the same person can have different levels of access on different courses/modules. For example, a user might be a reviewer on one course/module but a coordinator with full upload and management permissions on another.
Course/module roles are created in the organisation settings area, and then assigned to individual users within each course from the course users page.
How they interact
A user's effective permissions in a course are the combination of both their user role and their course role. There is one important exception: if a user's user role includes the "Manually manage courses" permission, they automatically have all course role permissions enabled across every course, without needing to be explicitly assigned a course role.
User-Level Permissions
| Permission | What it allows |
|---|---|
| Manage organisation settings | Can modify and manage all settings in the organisation |
| View all users | Can visit the user listing page and view all users in the organisation |
| Manually manage courses | Can access all courses in the organisation without having to be explicitly assigned to them |
| External examiner | Designates this user as an external examiner |
| Final examiner | Designates this user as a final examiner |
Course/Module-Level Permissions
Exam document set permissions
| Permission | What it allows |
|---|---|
| Manage exam document sets | Create and manage exam document sets |
| Add/remove deadlines | Set and remove upload and printing deadlines on an exam document set |
| Add/remove cover page information | Build and assign cover pages to documents |
Document permissions
| Permission | What it allows |
|---|---|
| Upload documents | Upload documents into exam document set folders |
| Preview/Download documents | Preview and download documents |
| Add/remove reviewers | Assign and remove reviewers on documents |
| Approve/reject documents | Submit a review decision on a document |
| Lock/unlock documents | Lock and unlock documents in a document set |
| Approve for printing | Approve documents for printing |
| Bulk download print-ready documents | Access the print jobs queue and bulk download print-ready documents |
| Add comments | Add comments to a document's event timeline |
A note on reviewer types
Internal, external, and final reviewers are not separate course/module roles - they are the same "approve/reject documents" permission applied at different stages of the review process. What determines whether a user can be assigned as an external or final reviewer is whether they have a user role that includes the external examiner or final examiner permission. Users without either of these permissions can only be assigned as internal reviewers.