Manage Administrator Groups and permissions

Permissions required: Administrator

Administrator groups let you give people administrative access without making them full system administrators. Each group is a named set of permissions. You assign users to a group, and they receive the access that group grants. A person can belong to more than one group.

How permissions work

Most capabilities are set to one of three levels:

• None: the area is hidden or unavailable to the group.
• Read: members can view that area, with no controls to create, edit, or run anything.
• Read & Write: members can view and also create, edit, or run, depending on the capability.

Two capabilities differ. Classic Courses uses View list in place of Read, and Access & Edit in place of Read & Write. Kora Courses offers only None and Access & Edit, with no Read level.

Create an administrator group

1. In Administration, select Administrator Groups to open the Administrator Groups list.

2. Select Add New Administrator Group.

3. Enter a Name for the group (1).

4. Set the permission level for each capability. Use Expand All and Collapse All to open or close the permission cards (2).

5. Select Create (3).

The new group appears in the Administrator Groups list.

Permissions reference

The table lists the capabilities in the order they appear, and what each level allows.

Capability	Read allows	Read & Write allows
Users	View users	Create and edit users
Administrator Groups	View roles	Create and edit roles
Classic Courses	View list	Access and edit
Works	View ePortfolios	Edit ePortfolios
Work Templates	View new templates	Edit new templates
Work Categories	View categories	Edit categories
Work Collections	View collections	Edit collections
Settings	View settings	Edit settings
Imports	View imports	Run imports
Submission Exports	View exports	Run exports
Programs	View programs	Edit programs
Notifications	View notifications	Edit notifications
Kora Courses	(no Read level)	Access and edit
Kora Outcomes and Rubrics	List	Create and edit
Kora Outcome Collections	List	Create and edit

Assign and remove members

Add a user to a group to grant them that group's access, and remove them to revoke it. Removing a user from a group, or deleting the group, does not delete the user account. It only changes their administrative access.

Edit or delete a group

• Edit: change a group's name or permissions and save. Members receive the updated access.
• Delete: remove a group. Its members lose the permissions that group granted. The member accounts themselves are not deleted.