Roles and Permissions Guide

ClassRanked Federated Roles & Permissions Documentation

Note: This document describes current functionality as of  — [1/07/2025]. Please check back for updates.

Overview

ClassRanked uses a federated roles-and-permissions system designed to give institutions fine‑grained control over who can see, manage, and configure different parts of the platform.

Roles operate on scopes, which are normally tied to the reporting hierarchy (college → school → department, etc.). Aside from the Account Owner/System Manager, roles can only act within their assigned scopes.

Role Types

ClassRanked includes the following institution‑level roles:

1. Account Owner (highest‑level role)

Intended for: Your institution’s primary Point of Contact with ClassRanked.

Key Capabilities: - Full access to all institutional data and all reporting. – In general, can edit any part of the system. Can create Account Owners and System Managers. - Full visibility and edit rights across all academic units.

2. System Manager

Intended for: Admin staff who configure institution-level information, who assist the Account owner with setup, but do not need to view reports.

Key Capabilities: - Similar to the Account Owner – can edit institution level information.

Critical Distinction: - System managers cannot view reports. They can assign themselves a scoped Owner/Viewer role at an Academic Unit level to view reports. See below for info about these roles.

3. Owner (Scoped Owner — “mini Account Owner”)

Intended for: College/school/department leaders who need broad oversight within their scope.

Key Capabilities: - Can manage data and view reports for their assigned Academic unit.

Restrictions: - Unlike the Account Owner, cannot manage institution-level data.

4. Editor (Scoped Editor — “mini System Manager”)

Intended for: Department-level admins who help Owners set up surveys.

Key Capabilities: - Very similar to Owner, but cannot view reports.

5. Viewer

Intended for: Users who need read-only access, including reports.

Key Capabilities: - Can see everything within their assigned scope. - Can view reports, but access is restricted to their scoped academic units.

Restrictions: - Cannot edit anything.

Additional Notes & Behaviors

User Management

·      Only Account Owners, System Managers, Owners, and Editors can manage users.

·      All user-management is scope-restricted.

             To prevent errors, please only upload users within your scope.

·      Admins can only edit users who fall within their academic-unit permissions.

Documentation will be updated further as system updates are made.