Roles

From InsightWiki
Jump to navigation Jump to search

The roles page

The roles page will show a list of the roles that have been created. Each role is a set of permissions that decides what users are able to see and do in Insight. Each user is assigned to a single role (users can never be linked to more than one role). Users will be assigned to a role when a sync is performed, and users can be moved from one role to another via the users page. The roles page is used to create and manage the roles, rather than assign them to users.

Rolespage.jpg

Each role will be displayed with its name, description and a tick box showing whether users assigned to that role need a PIN number when logging in.

Creating and editing roles

The buttons on the top toolbar are used to create, edit, delete and copy roles. When creating or editing a role, a list of the menu items available in Insight will be displayed.

At the top of the page are general settings for the role. Each role needs a name, a description and a type. The four available types apply to the different types of user that can log in to Insight:

  • Administrator
  • Staff
  • Parent
  • Student

There are five miscellaneous settings at the top of the page:

Setting Effect
PIN This enables two-factor authentication. When the user attempts to log in, a PIN will be emailed or sent via SMS to the user. They must then enter the PIN into Insight in order to log in
Allow contacting of staff This allows users to send emails to staff via the snapshot, timetable and linked adults and agencies pages. Specific staff can be excluded from this via the do not contact page
Allow password change This allows the user to change their password. This will not apply to SIMS passwords or Active Directory passwords
Do not prompt for generated password change By default Insight will prompt users to change their password, if they still have a system-generated random password
Allow merging of accounts This allows users to join their accounts together. This can be useful for households with more than one Insight account


PIN
This enables two-factor authentication. When the user attempts to log in, a PIN will be emailed or sent via SMS to the user. They must then enter the PIN into Insight in order to log in
Allow contacting of staff
This allows users to send emails to staff via the snapshot, timetable and linked adults and agencies pages. Specific staff can be excluded from this via the do not contact page
Allow password change
This allows the user to change their password. This will not apply to SIMS passwords or Active Directory passwords
Do not prompt for generated password change
By default Insight will prompt users to change their password, if they still have a system-generated random password
Allow merging of accounts
This allows users to join their accounts together. This can be useful for households with more than one Insight account

The next section allows you to choose exactly what you want parents to see in the main menu once they login. This can be updated at anytime, so for example if you only want to allow parents to see their child's attendance - just choose this option. Each item has a ‘main’ ON/OFF option at the far right to specify whether the item is visible to the selected role. (You can drag items around to re-order them by dragging them up and down using the icon as a dragging handle. Additionally, there may be other sub-options. For example, under the Snapshot item, you can decide whether to show today’s attendance by checking the Current Attendance sub-option. Further options can be setup up within Preferences.)