Better role management

There are WAY too many built-in roles. I have no idea what most of them do, and most of them don't do what you think they would. On top of that, cloning a role doesn't work, at least not in any logical way (it just creates a new blank role without any permissions....how is that cloning? That's just making a new role with no permissions...but I digress).

 

We need:

 

1) Hierarchal roles

2) Simplified and updated permissions

3) Consolidation of built-in roles

 

I realize this is a rather large project, but it's getting out of hand. I have to give someone 10-20 roles to get them the permissions they need for 1 application. That's just silly.

  • Guest
  • Apr 26 2016
  • Under consideration
  • Attach files
  • Amanda Polson commented
    13 Aug, 2023 12:27am

    Yes please! I end up giving people way more access than they need just to ensure they will be able to do a simple task. I have no idea what most of the roles even do.

  • Marita Gonsalves commented
    9 Feb, 2023 08:15pm

    Please include reports on roles as well. We have created numerous custom roles and it would be nice to run a report on role assignments.

  • Kirstin McDonald commented
    7 Apr, 2021 09:16pm

    Five years later and no movement on this issue. Everything Charlie and Susan talked about I have been dealing with for the past two years as we set up our school in BB. The whole process is very tedious and unintuitive.

  • Susan Ott commented
    8 Sep, 2016 07:18pm

    I agree wholeheartedly. My problem is that some roles have tasks hard wired in and when you clone them, even if that task is unchecked, it still gives the person access. For example, I just want a role that allows certain faculty like guidance counselors the ability to view any student report card (whether they teach them or not). We cloned the Grading Manager role and only checked generate report cards and transcripts. It also gives them access to record grades for any class. And record grades is unchecked on the cloned role. I would love to see a level between Manager role and Faculty role - something that gives viewing access to grade books, assignments, report cards, etc. but no ability to edit any of it. 

  • Gregg commented
    28 Jul, 2016 06:11pm

    Roles could use a serious revamping.  Probably the single most time consuming task is to figure out how to give some permission to perform a single task.  Documentation of the roles would also be a big help

  • Guest commented
    16 May, 2016 02:29pm

    Tien Bui, I don't know about you, but I expect role cloning to work like templating: you clone a role that is similar to the new one you want, then edit the permissions to reflect what you want. This way you don't have to manually set every single permission, only those that differ from the parent role.

    The way it works for me (last time I checked) was that cloning a role did nothing but create a new role with no permissions, which ISN'T cloning. That's just creating a new role. So if I need to create 2 roles that are very similar but differ by 1 permission setting, I end up having to set all the permissions again anyway.

    Also, not responding to Tien, but just a general comment: I shouldn't have to give my admissions people 10 different roles to give them the access they need. Part of the problem is that some roles have inherent permissions that you can't or even see. We need clarity on what the roles actually do.

  • Tien Bui commented
    12 May, 2016 03:59pm

    I would also go further and request for an option to combine roles to a newly created custom role.  I agree that "cloning" is not working like how we usually think it should work.  Technically speaking, if the label is "clone" then the newly created role would be exactly the same as the old one, which in my opinion, is quite a useless feature.  

    I would opt to remove the phrase "cloning" and simply have "add custom role".  I would imagine there would be a non-page reloading search function to allow us to search through the roles task (w/ description would be a plus).  We can then select those tasks in search and add them to our custom role.