SharePoint Learning Management System
User Roles and Permissions
SharePoint LMS
SharePoint LMS Language The SharePointLMS security model is based on Microsoft Office SharePoint Server security but is simplified in terms of items, lists and libraries permission management. The below mentioned LMS parts correspond to the following SharePoint parts: SharePointLMS = SharePoint web application SharePointLMS Organization = SharePoint Site Collection SharePointLMS Course = SharePoint Site Collection SharePointLMS Course Tools = SharePoint Lists and Libraries SharePointLMS Course Tools Items = SharePoint List and Library Items
User Roles and Permissions
By default, the SharePointLMS security model includes User Roles on the following levels:
SharePoint Administration Level
Farm Administrator - such users can create/change/delete the organization levels and configure the LMS Global Features. Farm administrators are responsible for operations dealing with LMS back up and LMS licensing. Farm administrators can change and add any Site Collection Administrator.
SharePointLMS Organization Level
Organization Administrator / Organization Site Collection Administrator – such users can modify/create/delete anything within their organization level. Course Creators are able to create new courses within a chosen SharePointLMS organization. Technical Administrators – users have the same rights in every course of the organization as Teachers have in their courses, but have no specific permissions in the Organization. NOTE: Technical Administrators will have to be added in Central Administration by Farm Administrator.
Course Flow Administrator - such users can create Course Flows and add all course items to it. Visitors (All authenticated users by default) can browse through the LMS but don’t have access to Courses tools or the possibility to add/change/delete data.
User Roles and Permissions SharePoint LMS Course Level
Teachers / Course Site Collection Administrators – users have unlimited access to a specific course and can add/delete/modify anything within the course by default. Teachers Assistants – users have similar permissions as Teacher but cannot delete course. Learners (Learner Permission Level) have limited access to the tools. Faculty – users in charge of faculty administration, such as secretaries etc. Users have limited access to tools. Visitors (All authenticated users by default) are allowed to browse through the LMS but don’t have access to Courses tools or ability to add/change/delete data.
Registration and Enrollment Module
REM Permission levels
Staff Mgr/Local Admins can modify, create, and delete anything within REM site collection. They can’t grant permissions and have no access to the site settings (Local Admins can edit the Welcome Page)
Line Managers have similar permissions as Teachers but additionally could enroll users to courses via course offerings
Teachers have limited access to view specific courses, enroll learners and create reports
(All Authenticated users by default) Candidates can browse through REM but can’t add/change/delete data; they can only enroll in offered courses
Learners have limited access to the REM tools: they have reading rights and are able to enroll to the course offerings
Competencies and Certifications Module
User Roles and Permissions CCM is divided into the following user groups: • Global Administrator • People Administrator • Team Leader • Employee
Global Administrator CCM Site Collection Administrator Management of Employee Profile Structure (add/edit/delete employee profile’s metadata attributes) Management of Team Profile Structure (add/edit/delete team profile’s attributes) Management of Competency Framework (add/edit/delete competencies (including taxonomy scales, levels and behavioral indicators), competency group, roles, jobs, job families) Management of Certificate templates Certificate Templates Mapping to Competency Levels Management of Report and Survey Template Repository (add/edit/delete) Management of Announcements (from global level down to organizations, teams and employees)
People Administrator
Management of Employee profile (add/edit/delete information in the employee’s profile) Management of Employee Action Plan (add/edit but can’t DELETE items in the action plan since the completed items will be checked as “completed” and remain in the Action Plan) Management of Employee Personal Competencies (add/edit/delete acquired competencies based on Gap analysis) Management of Employee Certifications (grant/revoke/view certifications) Compiling reports based on available reports repository and delegating them to one or more subscription groups Managing the announcements (from organization’s level down to teams and employees)
Team Leader Team leader is a member of the team who may not have any authority over members of the team but coordinates team efforts, represents the team and makes decisions concerning the team. Directly responsible for the following activities: • Management of Team Profiles (add/edit/delete team members) • Managing the announcements (on team’s level) (Permissions can be increased by global administrator for additional responsibilities)
DashBoard
DashBoard Administrator Administrator is a user who is a member of Site collection administrators in site permissions. This role is designed for dashboard configuration. Administrator performs the following activities • Sets Registration and Enrollment Module site to be associated with the Dashboard. • Defines where Dashboard should take profile settings (from CCM or from SharePoint) • Enables/disables “Show Tree of Staff” option • Enables/disables an ability to search profiles among All Users • Chooses how links from the “Links” section should be opened (in a new window or in the same). • Sets custom Relations between employees • Adds custom company’s URLs (Site Settings -> Quick Launch) • Sets what menu items and menu section titles are shown for Manager or\and Employee • Edits menu items and menu section titles, i.e. sets custom Title, URL • Adds or removes indents to any menu item. • Modifies Dashboard homepage.
DashBoard Manager Employee is a user who is a member of Employees group in the site permissions. Employee performs the following activities: My Dashboard section: • • • • • • • •
View My Dashboard (Homepage) View My Learning Plan View My Learning View My Competencies View My Action Plan View My Certifications View My Certificates View My E-portfolio
Links section: • •
SPLMS Organization Competencies and Certifications (host site)
•
Course Catalog (from REM)
DashBoard Employee Team leader is a member of the team who may not have any authority over members of the team but coordinates team efforts, represents the team and makes decisions concerning the team. Directly responsible for the following activities: • Management of Team Profiles (add/edit/delete team members) • Managing the announcements (on team’s level) (Permissions can be increased by global administrator for additional responsibilities)