Service Permissions

Overview - Service Permissions

Are you sure you want to remove this component?

In Schoolbox, you can give individual users advanced permissions for different services. These advanced service permissions can be applied to individual users who require greater authority over work flows in Schoolbox, but who DON'T need Superuser access. Examples may include, but are not limited to, Marketing Leader who wish to 'Moderate' News across their school. It can also include accessing system modules like the pastoral care, or fixtures. It could also include giving users permissions that override what is normally available to someone in their role, such as accessing all the folders of the resource browser or creating/moderating news and calendar items.

On this page, you will find the following information:

Descriptions of Service Permissions

Granting Service Permissions to Users

Checking Service Permissions of Users

Descriptions of Service Permissions

Are you sure you want to remove this component?

Note: Some Admin pages may be available or unavailable depending on other configuration settings. As a result, the screenshots may not exactly match what you see in your system.

Badges

ReadN/A
Write

The ability to create badges.  Not all staff can view and edit badges.

If 'Create Badges' is enabled in Administration > User Management > Lists - Roles, users in that role can create, edit, and delete badges, regardless of whether they have 'Write' permission for badges.

If 'Create Badges' is turned off in Administration > User Management > Lists - Roles, only users with 'Write' permission for badges can create, edit, and delete them.

ModerateWrite-level access, plus limited access to the Admin system such as:
 image.png

 

Calendar

Service Identifier: Campus

For the calendar system module, you will also need to set the campus for which you are granting access.

ReadWill enable the user to view all published events in the calendar for the identified campus in the system. This can be used to add the view of additional campuses' calendars without assigning the user to the campuses.  
WriteWill enable the user to view all published events in the calendar and add events for the identified campus in the system.
ModerateWill enable the user to view all published and unpublished events in the calendar and add events for the identified campus in the Admin system such as:
image.png

 

Curriculum 

ReadN/A
Write

The user will have full access to:

  • access the 'Manage Curriculum' page, 
  • add and modify curriculum, 
  • update curriculum through the 'Modify' page, Curriculum Overview, and Description components.
ModerateN/A

 

CMS

The CMS (content management system) refers to the entire folder and homepage structure in Schoolbox.

ReadWill enable to user to view all folders and homepages in 'Resources' and have access to view any homepage in the system including restricted groups.
WriteWill enable the user to view and have access to modify these folders and homepages. This will enable them to manage files, including deleting and customising the homepages, and adding sub-folders etc.
ModerateIn addition to read and write access, moderate will grant the user Group admin permissions, and will enable the user to manage permissions to the folders and homepages. Specifically, this will enable the user to add and remove users from the groups on those folders/homepages. Also limited access to the Admin system such as:
image.png

 

Design

ReadN/A
WriteN/A
ModerateWill allow access to design-related areas of the Admin system such as:
image.png

 

Fixtures 

ReadN/A
WriteN/A
ModerateThe user will have access to the Fixtures module.

 

 

Impersonator

Service Identifier: Role

For the Impersonator service permission, you will also need to set the role of the users to be impersonated.

ReadN/A
WriteN/A
ModerateAllows impersonation of users with the specified role, except for Superusers and Pastoral Moderators with higher-level Pastoral access than the impersonating user.

 

LMS

ReadN/A
WriteN/A
ModerateThe ability to view, create, and modify content. Also limited access to the Admin system such as:
 image.png

 

News

ReadN/A
WriteIf 'Enable Staff to Post to Global Audiences' is toggled to 'OFF', users with this permission will be able to post to Global Audiences. If this setting is toggled to 'ON', and 'Enable Moderation of Global News Articles' is toggled to 'ON', users will still be required to have their articles moderated before publishing.
Moderate

Will enable the user to post and publish news articles to global audiences and moderate articles that have entered the moderation queue.

The user can also post Piority News that will notify the audience of the news, on all notification channels, regardless of their personalised notification settings and also pin the item to the top of the news feed. Also limited access to the Admin system such as:
image.png

 

Pastoral

Read

The user will be able to access and read all Pastoral care records. 

This depends on what is set in Administration > User Management > Lists - Roles.

If 'Access Pastoral Care' is enabled in Administration > User Management > Lists - Roles, users in that role can view, create, edit, and delete badges, as well as access the Pastoral Care report, even if they don’t have any specific pastoral permissions assigned.

If 'Access Pastoral Care' is turned off in Administration > User Management > Lists - Roles, only users with Pastoral Read permission can view, create, edit, and delete badges, as well as access the Pastoral Care report.

Write

The Write access determines whether users can access the 'Pastoral Bulk Import', 'Manage Groups', and 'Manage Pastoral Records Settings' pages, and it is not tied to the Administration > User Management > Lists - Roles settings.

If Pastoral Write permission is granted, users in that role will be able to access the Pastoral Bulk Import, Manage Groups, and Manage Pastoral Records Settings pages.

ModerateThe user will have all the "write" permissions, along with the ability to delete pastoral notes and access a subset of Admin features such as:
image.png

 

Resource Booking

ReadN/A
WriteN/A
Moderate

This effectively gives the user the ability to change all data within the Resources Booking service. The user will be able to complete all of the following actions:

  • Book resources despite any validation rules.
  • Manage resources.
  • Delete bookings.
  • Assign or reassign users to the role of booking validation for a particular resource.

 

Timetable

ReadN/A
WriteN/A
ModerateWill allow access to timetable-related areas of the Admin system such as:
image.png

 

Granting Service Permissions to Users

Are you sure you want to remove this component?

1. Go to Administration > User Management > Home.

2. Search for the user that you wish to assign specific service permissions, then select 'Modify'.

image.php?hash=475a4a2ba472bd55d41b5920f9f7b3c4bff3c924

3. Scroll down to the Service Permissions section.

4. Choose the ‘Select Service’ drop-down box to select the necessary service.

image.png

5. If a Service Identifier is necessary, choose one from the next drop-down box.

image.png

NOTE: If a user requires access to a Service with more than one Service Identifier, you will need to add another row of permissions; for example, Calendar for Junior Campus and Calendar for Senior Campus will need to be completed twice.

6. Choose the level of access necessary from the last drop-down box.

image.png

7. Select 'Add'.

For more information, see Grant access levels.

 

View Users with Service Permissions

Are you sure you want to remove this component?

1. Go to Administration > User Management > Home.

On the bottom left of the screen you will see a list of the available service permissions with the number of users assigned to those permissions.

image.png

2. Select the title of a service permission to view the Service Permissions page, which lists the users, Service Identifier, and Access levels assigned to each service permission.

image.png

If you select a user's name, you will be taken to their User Detail page, where you can manage their permissions.