Access and roles

Before you start

Only an admin can grant or revoke roles, not a Credential Admin; in a narrow case, an eligible user can also self-claim as a course manager (see "Instructor self-claim" below). Every permission is checked on the server; hiding a button is never how access is controlled. The roles you can grant are admin, Credential Admin, course manager, and instructor or teaching assistant for a session.

Steps

1. 1Open the People and Access page
   Choose People and Access in the Admin app sidebar; the grant wizard sits below the user directory
2. 2Search for the person
   Search by name or email and pick an existing account; for someone who has never signed in, use the separately labeled "invite by email" option instead, which takes effect once they sign in
3. 3Choose a role and scope
   Admin and Credential Admin need no scope (a Credential Admin cannot be invited by email, the person must have signed in before); a course manager needs a course chosen from the course list; an instructor or teaching assistant needs a session
4. 4Confirm the change
   Review the person, role and scope in the summary step, then submit in the confirmation dialog before the role actually takes effect; every change is written to the audit log
5. 5Revoke
   Select Revoke in the role table and confirm; revoking the platform's last admin is blocked
6. 6Manage account status
   In the user directory, search for an account and set it to suspended, disabled, or active again

The HR viewer role

"HR viewer (feedback only)" is a read-only role granted in the organization workspace; it covers only that organization's course-feedback statistics and de-identified comments. It gives no access to the organization's other data (for example Use Cases) or to other organizations.

• Manage course feedback

Expected result

After signing in, the person has the matching permissions and can see them under Roles & Permissions on the Account page. The course manager table shows whether each manager was granted by an admin or self-claimed.

Common problems

1. 1They still can’t get in after the grant
   Ask them to sign out and in again, using the email that was granted.
2. 2Does joining a session with a code make a learner an instructor?
   No. Joining a session never grants instructor or admin access.
3. 3Why can a Credential Admin not see the role-granting tools?
   Granting and revoking roles is admin-only; Credential Admins focus on certificate management.

• Roles and permissions

Instructor self-claim (narrow case)

An eligible user can enter a course code on "/teacher/courses" to self-claim as that course’s manager, without an admin granting it manually. This only succeeds when the course has no manager assigned yet, and the requester already holds an instructor or teaching-assistant role on one of that course’s sessions, or their account email is on the platform’s approved instructor allowlist; a course that already has a manager cannot be claimed this way.