New "Role Administrator" role
A new "Role Administrator" role has been added to enable a user other than a Global Administrator to assign roles to other users.
The "Role Administrator" role is scoped in the same way as other delegated administration roles. The scope of the "Role Administrator" role defines which users the "Role Administrator" can modify the roles for, but does not control what roles they can assign, or the scopes that they can apply when adding those roles.
The roles that a "Role Administrator" can assign, and the scope of those roles is based on the roles held by that administrator. A "Role Administrator" can assign any of the roles that they hold to other users, with the same (or in the case of organisational units, more limited) scope as their own role assignment. They cannot assign roles that they do not themselves hold.
The following is an example of roles that could be assigned by a new "Role Administrator":
Given the following groups:
Sales Team | Admin Team | Operations Team |
---|---|---|
John | James | Kathryn |
Susan | Mary | Neil |
Marie | Mike | Amy |
and the following organisational unit structure:
Company > UK > Sales
> Operations
> USA > Admin
> Operations
> Sales
with the following membership of each organisational unit (OU):
Company | |||||||||||
UK | USA | ||||||||||
Sales | Operations | Admin | Operations | Sales | |||||||
John | Kathryn | James | Neil | Marie | |||||||
Susan | Mary | Amy | |||||||||
Mike |
a "Role Administrator" with the following roles:
Role | Scope |
---|---|
Role Administrator | Group: Operations Team |
Reporter | Group: Operations Team, OU: Company > UK |
User Administrator | OU: Company > UK > Operations |
Password Administrator | OU: Company > UK > Operations |
Notifier | Group: Operations Team, OU: Company > UK > Operations |
can perform the following actions:
Action | Reason |
---|---|
Assign roles to Kathryn | Kathryn is a member of the Operations Team group, which is scope for the administrators Role Administrator role |
Assign Reporter role with OU: Company > UK > Sales scope | The administrator has the Reporter role, and the OU: Company > UK scope, and OU: Company > UK > Sales is a subset of the scope defined for the administrator |
Assign Notifier role with OU: Company > UK > Operations scope | The administrator has the Notifier role, with the OU: Company > UK > Operations scope, and OU: Company > UK > Operations is an exact match of the scope defined for the administrator |
Assign Role Administrator with Group: Operations Team scope | The administrator has the Role Administrator role, with the Group: Operations Team scope, and Group: Operations Team is an exact match of the scope defined for the administrator |
and they cannot perform the following actions:
Action | Reason |
---|---|
Assign roles to John | John is not a member of the Operations Team group, so is not in scope of the administrators "Role Administrator" role |
Assign Reporter role with OU: Company scope | While the administrator does have the Reporter role, the OU: Company scope is less restrictive than the OU: Company > UK scope applied to the administrator for their Reporter role. A Role Administrator cannot assign roles that give a user more permissions than they already have |
Assign the Content Administrator role with the Group Operations Team scope | The administrator does not themselves have the Content Administrator role, so they cannot assign this role regardless of scope |
Instructor Notifications
When you add an event session, you can define the instructor (or set of instructors) for the session, as well as for hosted (Teams or Zoom) sessions, defining the host for the session.
When a user enrols to attend a session, they receive an email notification, which includes an attachment to enable the attendee to add the session to their calendar (for example Outlook calendar). Previously, no equivalent email was sent to the host/ instructor.
This new feature has added a new email template, which is used to send an email to instructors/hosts to inform them that they have been added to the session as the instructor/host. Similar to the email sent to attendees, this includes an attachment to enable the instructor/host to add the session to their calendar.
Bug fixes
Various bug fixes.
Comments
0 comments
Please sign in to leave a comment.