System Roles (Security Profiles)

A system role (or security profile) is used to set the default level of access a user has to the Curriculum Management system. A system role is assigned to all users when the user account is created, and will default to the system role of 'user', although this can be adjusted as needed by either changing the system role assigned - or by assigning granular permissions to a role within a group a user is placed in.

There are three security profiles available:

Admin

An Admin will have the highest level of control within CM, and will be able to adjust configurations, users, groups, and other user permission settings. There is no limit to the number of Admins you can have within your system, but it is recommended to keep the number of Admins low.

CMAdmin

A CM Admin is a step down from the Admin level - users who have the CM Admin level are able to manage some of the Admin level features, such as adjusting system settings or admin approving proposals - but will not be able to manage groups or users.

User

A User is the default level assigned to users. This will provide general access within CM, including creating and editing proposals, submitting proposals for review, etc.

Default Permissions for System Roles

Area of CM	Function	System Role:
		Admin	CMAdmin	User
Users
	View
	Create, modify, change active status
	Modify own account
Groups
	View, create, modify, delete Groups
	Manage users in Roles
	View, create, modify, delete Categories
System Settings
	Options: View/modify option types, subject codes, etc
	Other Settings: View/modify course and rule sets
	Admin Settings: View/modify date formats, feature flags, preferences, etc
	Config Settings: view/modify form configuration (title, description, and help text only)
	Workflow Settings: view and manage workflow
Proposals
	View proposals
	Admin approve proposals
	View admin-only panels
	Admin edit proposals in progress and active records
	Delete completed records
Proposal Groups
	View Proposal Groups
Agendas
	View, create, modify
Reports
	View, create, save
Catalog
	View, create, modify

The permissions outlined above only provide the default settings for when a new user is created. If you find that you need to adjust permissions for users, you can either adjust the role assigned to them or customize the permissions further.

Note: This article refers to the default setting; meaning that the feature flag for Permissions has not been enabled. If the the flag for permissions is enabled in your instance, then the CM Admin will default to the user permissions, requiring them to be added into a role with selected permissions to access some features.