User groups and permissions

User groups make it possible to build permission profiles for system users and control the areas of the system and individual features to which those users have access. The system comes with an extensive set of granular permissions which can be grouped together to create the permissions profile. Once the user is assigned to that user group they will inherit those individual permissions.   

There is a huge amount of flexibility within this feature to enable you to create a set of permissions that suit the needs of your organisation. For example, this could be split by system role. Where an "authors" group might have all the authorship permissions assigned whereas an "exam managers" group might never need to author an item but needs to set up and administer the exam. Similarly, these user group permissions might be aligned to organisational roles and responsibilities, e.g. "Assessment Team", "Team Manager", "Academic Lead" etc.

Setting up user groups

• Step 1 of 4

  Navigate to Settings > User groups

  

• Step 2 of 4

  Click Create new user group

  

• Step 3 of 4

  Add a title for the group and select the individual permissions you would like to add to it.

  

• Step 4 of 4

  Once created, the user group will be shown in the index and is available to be added to a user during the account creation process or for users to be added in bulk to the group.

  

Bulk adding users to groups

It is possible to add users to the group directly and in bulk from the View screen.

 Select the user(s) from the list and Add selected users to group.

Editing and deleting groups

It is also possible to change the permissions associated with a user group at any time on the Edit screen.

Any changes here will be immediately applied to the user's permissions profile.

You can also use the Remove button to delete the user group.

A warning dialogue is shown before the group is removed.

List of default permissions

The individual available permissions are explained here:

• Permission	Description	Dependencies
  Add exam blueprints	User is able to create exam blueprints	Must also have view exam blueprints permission
  Edit exam blueprints	User can edit an existing exam blueprint	Must also have view exam blueprints permission
  Edit Exam blueprints settings	User can edit exam blueprint settings	Must also have view exam blueprints permission
  Manage Master blueprint	User can manage the master blueprint. This permission allows working with blueprint dimensions, categories and blueprint maps	Must also have view exam blueprints permission
  View Exam blueprints	User can only view exam blueprints (assuming none of the above are set)

• Permission	Description	Dependencies
  Add new Exam	User is able to create new exam	Must also have view exams and edit exam permissions
  Edit Exam	User can edit an existing exam	Must also have view exams permission.
  Generate and download video meeting recordings	Controls which users can generate and download video meeting recordings (if recording is enabled)
  Manage exams	User can hide, unhide and delete exams
  Mark exams	User can mark exams
  Publish to Kaizen	User can publish the exam results to risr/ advance
  Review exam	User can change review state of an exam (eg. approve/reject)	Must also have view exams permission.
  Run exams	User can publish exams to devices or run an exam on paper	Must also have view exams permission.
  View Exams	User can only view exams (assuming none of the above are set)

• Permission	Description	Dependencies
  Add new Item set	User is able to create new item set	Must also have view item sets, edit item set and view (own) items permissions
  Edit Item set	User can edit item set	Must also have view item sets, edit item set and view (own) items permissions
  Review Item set	User can change review state of a item set (eg. approve/reject)	Must also have view item sets permissions
  Score Item set	User can Ebel score item sets	Must also have view item sets permissions
  View Item sets	User can only view item sets (assuming none of the above are set)

• Permission	Description	Dependencies
  Add new Item	User is able to create new items	Must also have view (own) items and edit item permissions
  Archive Item	Users can archive an item
  Clone Item	Users can clone an item
  Create a new version of Item	Users can create new version of an item. User with edit item or edit own item can always create a new version of the item.
  Edit Item	User can edit item	Must also have view items permission
  Edit Own Item	User can edit their own items only	Must also have view own items permission
  Edit Pending Item	User can edit item in pending state (i.e. item that is waiting for approval).
  Export Preview Item	Users can export item preview	Must also have view items permission
  Export Preview Own Item	Users can export previews of their own items only. Make sure to disable export preview item if you don't want user to be able to export items owned by others	User must also have view own items permission
  Export items	Users can export items from the item bank
  Import items	Users can import items to the item bank
  Review Item	Users can change review state of a item (eg. approve/reject). This does not include archiving. See archive item permission	Must also have view (own) items permission
  View Items	User can only view items. This permission allows users to view all items in the item bank according to the user blueprint settings
  View Own Items	User can only view own items (i.e. created or edited by the current user)

• Permission	Description	Dependencies
  View reports	User can access reports section and run reports.

• Permission	Description	Dependencies
  Add new Resource	User can add new resource	must also have view resources and edit resource permissions
  Download Resource	User can download the resource as a file	must also have view resources permissions
  Edit Resource	User can edit resource	must also have view resource permission
  Review Resource	User can change review state of a resource	must also have view resource permission
  View Resources	User can only view resources (assuming none of the above are set)

• Permission	Description	Dependencies
  Access browsable API	User can access browsable API documentation on the /rest endpoint
  Edit live dashboard	User can edit conditions for the live exam dashboard
  Manage devices	User can access Settings > Devices and view/manage devices authorised to communicate with risr/assess Server
  Manage risr/assess	User can manage options in Settings menu (except users, groups and devices)
  Manage users	User can view, add, edit and delete users and manage user group membership

• Permission	Description	Dependencies
  Allow mapping	User can map or re-map fields of event types for publishing results to risr/advance.
  Allow publishing	User can view existing mapping and publish the exam results to risr/advance.

Group assignment permissions

For an extra layer of granularity and control it is also possible to segment user permissions by any blueprint dimensions that exist in the system. For example you may only want sub groups of authors to see items that are tagged to their specialty. Please see the dedicated article on Group assignments and dimensions for full details on this feature.