TracCloud: Staff User Level: Difference between revisions

From Redrock Wiki

No edit summary
No edit summary
 
(33 intermediate revisions by the same user not shown)
Line 1: Line 1:
{{TracCloudGuideTabs}}
{{TracCloudGuideTabs}}
{| style="width:100%; vertical-align:top; "
<div class="tcWidgetPage">
| style="width:250px; vertical-align:top; padding:2px 15px 2px 2px;" | {{TracCloudGuideProfileTOC}}
<div class="categoryWide">
| style="vertical-align:top; padding:20px 20px 20px 2px;" |
{{TracCloudGuideProfileTOC}}
{| style="width:100%; vertical-align:top; "
</div>
==User Level in Staff Accounts==
<div class="pageTitle">Staff User Level</div>


Every Staff account in TracCloud is assigned a User Level, <b>SysAdmin</b>, <b>Profile Admin</b>, or <b>Staff</b>. These levels impose restrictions on the selected account that go beyond what you can control with just a [[TracCloudGuideProfileGroups|permission group]]. This article goes over the exact differences between these levels.
Every Staff account in TracCloud is assigned a User Level, <b>SysAdmin</b>, <b>Super Admin</b>, <b>Profile Admin</b>, or <b>Staff</b>. These levels impose restrictions on the selected account that go beyond what you can control with just a [[TracCloudGuideProfileGroups|permission group]]. This article goes over the exact differences between these levels.


[[File:5574079.png|900px]]
[[File:5574079.png|800px]]
<hr>
<div class="line"></div>
<b><big>Unique to SysAdmin Accounts</big></b>
<b><big>Unique to SysAdmin Accounts</big></b>


SysAdmin accounts provide the highest level of access in your Trac System, that includes potentially sensitive data, utilities to modify data in bulk, and the ability to edit technical aspects of your TracCloud instance. Here are the options that <i>only</i> System Administrators can access.
SysAdmin accounts provide the highest level of access in your Trac System, that includes potentially sensitive data, utilities to modify data in bulk, and the ability to edit technical aspects of your TracCloud instance. Here are the options that <i>only</i> System Administrators can access.


* <b>Global Preferences</b> - Everything from [[TracCloudGuideGlobalSystem|system theme]], to [[TracCloudGuideGlobalCustom|custom fields]], to [[TracCloudTechSSO|SSO integration settings]] and more. This entire menu can only be accessed by SysAdmins.
* <b>Global Preferences</b> - Everything from [[TracCloudGuideGlobalSystem|system theme]], to [[TracCloudGuideGlobalCustom|custom fields]], to [[TracCloudTechSSO|SSO integration settings]] and more. SysAdmins are always unrestricted in this access compared to the potentially limited access that Super Admins can be given.  
 
* <b>[[TracCloudGuideGlobalAnnouncements|Announcements]]</b>
 
* <b>[[TracCloudTechExport#2._SFTP_Export|Visits/Appointments SFTP Export]]</b> & <b>[[TracCloudTechExport#5._Starfish_Export|Starfish Export]]</b>


* <b>[[TracCloudGuideListingsSavedSearches|Saved Searches]]</b> - Specifically the menu to manage or delete Saved Searches, other User Levels can still save and access their personal Saved Searches.
* <b>[[TracCloudGuideListingsSavedSearches|Saved Searches]]</b> - Specifically the menu to manage or delete Saved Searches, other User Levels can still save and access their personal Saved Searches.


* <b>All utilities for merging, deleting, or modifying data in bulk</b> - The ability to merge, delete, or modify individual records is determined by Permission Group.
* <b>Utilities for merging or modifying data in bulk</b> - The ability to merge, delete, or modify individual records is determined by Permission Group.
 
* <b>Profile-specific Group Entry</b> - SysAdmins can open Permission Groups within a specific Profile, to access only that Profile's Center choices.


* <b>The ability to Create [[TracCloudGuideGlobalLists|Student Lists]]</b>
* <b>Access to the "Delete Selection" option on some listings</b> - Students, Staff, and Faculty listings.
* <b>The ability to edit locked Visits</b> - In other words, SysAdmins can override the 'Lock visits older than' setting in your Profile.
* <b>The ability to edit locked Visits</b> - In other words, SysAdmins can override the 'Lock visits older than' setting in your Profile.


* <b>[[TracCloudSAGE|SAGE referral types]]</b> - Specifically the ability to modify Referral Types and Emails, other users can still submit Referrals for Students (assuming their Group allows it).
* <b>The ability to delete [[TracCloudGuideProfileReasons|Reasons]]</b> - Other users can still deactivate or modify Reasons, just not delete.


* <b>[[TracCloudQ2|Q2 Table Management]]</b> - Settings for Q2 Tables, other users can access the Tables themselves (if their Group allows it).
* <b> The ability to set a custom "From" address when emailing users.</b>
 
* <b>The ability to delete [[TracCloudGuideProfileReasons|Reasons]]</b> - Other users can still deactivate or modify Reasons, just not delete.


* <b>The ability to edit [[TracCloudReports|Favorite Reports]] of other users</b>
* <b>The ability to edit [[TracCloudReports|Favorite Reports]] of other users</b>
Line 47: Line 39:
And of course, some of the more obvious ones...
And of course, some of the more obvious ones...


* <b>The ability to edit “Lock to SysAdmin” [[TracCloudGuideBasicsCourses|Course Lists]]</b>
* <b>The ability to edit “Lock to SysAdmin” [[TracCloud:_Course_Lists|Course Lists]]</b>


* <b>The ability to set other users as SysAdmin</b>
* <b>The ability to set other users as SysAdmin</b>


* <b>'[[TracCloudNewsLoginAs|Log In As...[any account in TracCloud]' Utility]]</b>
* <b>Unrestricted access to the '[[TracCloud:_Log_In_As|Log In As...[any account in TracCloud]' Utility]]</b>
 
<hr>
<b><big>Super Admin level or higher</big></b>
 
Super Admins are similar to Profile Admins, but with a few minor additions and the ability to provide access to select global preferences. Access to global preferences is configured in the super admin's staff account, next to 'Linked Centers.' Aside from the specific global preferences, here are the options that only Super Admins and SysAdmins have access to.
 
* <b>[[TracCloud:_Announcements|Announcements]]</b>
 
* <b>[[TracCloud:_Data_Export#2._SFTP_Export|Visits/Appointments SFTP Export]]</b> & <b>[[TracCloud:_Data_Export#5._Starfish_Export|Starfish Export]]</b>
 
* <b>Access to the [[TracCloudGuideBasicsSchedule|Availability Blocks]] listing</b>
 
* <b>Profile-specific Group Entry</b> - Super Admins/SysAdmins can open Permission Groups within a specific Profile, to access only that Profile's Center choices.


* <b>The ability to Create [[TracCloudGuideGlobalLists|Student Lists]]</b>, unless you [[TracCloudGuideGlobalStudentFields|allow Profile Admins to create lists in Student Entry Choices.]]
* <b>[[TracCloudSAGE|SAGE referral types]]</b> - Specifically the ability to modify Referral Types and Emails, other users can still submit Referrals for Students (assuming their Group allows it).
* <b>[[TracCloudQ2|Q2 Study Table Management]]</b> - Settings for Q2 Tables, other users can access the Tables themselves (if their Group allows it).
* <b>The ability to use the '[[TracCloud:_Log_In_As|Log In As...[any account in TracCloud]' Utility]] to login to Profile Admin accounts or below.</b>


<hr>
<hr>
<b><big>Profile Admin level or higher</big></b>
<b><big>Profile Admin level or higher</big></b>


Profile Admins still have access to many important settings and functions in TracCloud, and will be the ideal level for most of your "admin" accounts. Options like Profile Preferences and Group Management are still available, but potentially dangerous or sensitive utilities are hidden. Here are the options that only Profile Admins and SysAdmins can access.
Profile Admins still have access to many important settings and functions in TracCloud, and will be the ideal level for most of your "admin" accounts. Options like Profile Preferences and Group Management are still available, but potentially dangerous or sensitive utilities are hidden. Here are the options that only Profile Admins, Super Admins, and SysAdmins can access.


* <b>The entire [[TracCloudGuideProfileGeneral|Profiles]] menu</b> - Including [[TracCloudGuideProfileCenters|Centers]], [[TracCloudGuideProfileReasons|Reasons]], [[TracCloudGuideProfilePrefsLogInOut|Prefs]], etc.
* <b>The entire [[TracCloudGuideProfileGeneral|Profiles]] menu</b> - Including [[TracCloudGuideProfileCenters|Centers]], [[TracCloudGuideProfileReasons|Reasons]], [[TracCloudGuideProfilePrefsLogInOut|Prefs]], etc.
Line 69: Line 81:
* <b>[[TracCloudGuideBasicsPayroll|Work Types Listing]]</b> - And by extension, the ability to modify Work Types.
* <b>[[TracCloudGuideBasicsPayroll|Work Types Listing]]</b> - And by extension, the ability to modify Work Types.


* <b>The ability to modify the assigned Group and Centers of [[TracCloudGuideProfileStaff|other staff]].</b> <i>Group</i> is filtered to only groups assigned to the same profile of the current user's primary center.
* <b>The ability to modify the assigned Group and Centers of [[TracCloud:_Staff_and_Consultants|other staff]].</b> <i>Group</i> is filtered to only groups assigned to the same profile of the current user's primary center.


* <b>The ability to create [[TracCloudGuideListingsStudents|Student]] records manually</b><br><br>
* <b>Access to the "Delete Selection" option on some listings</b> - Appointments, Course Lists, Documents, Referrals, Registrations, Success Plans, and Attendance listings, if their group has table access for said listing.
 
* <b>The ability to create [[TracCloudGuideListingsStudents|Student]] records manually. This permission can be granted to staff through a [[TracCloud:_Permission_Groups|permission group override]].</b>
 
* <b>The ability to edit [[TracCloudSuccessPlans|Success Plan Types]]</b> (if their [[TracCloudGuideProfileGroups|permission group]] allows it in table access)<br><br>


And a few Reports:
And a few Reports:


* <b>The entire [[TracCloudReportsSecurity01|Security category]]</b>
* <b>The entire [[TracCloud_Report:_Profile_Detail|Security category]]</b>


* <b>The entire [[TracCloudReportsPayroll01|Payroll category]]</b>
* <b>The entire [[TracCloudReportsPayroll01|Payroll category]]</b>
Line 81: Line 97:
* <b>[[TracCloudReportsManagement11|Students Visits Cleanup Data]]</b>
* <b>[[TracCloudReportsManagement11|Students Visits Cleanup Data]]</b>


* <b>[[TracCloudReportsManagement14|Visits by Faculty and Subject]]</b>
* <b>[[TracCloud_Report:_Appointments/Visits_Utilization|Appointments/Visits Utilization]]</b>
 
* <b>[[TracCloud_Report:_Visits_by_Faculty_and_Subject|Visits by Faculty and Subject]]</b>


* <b>[[TracCloudReportsManagement15|Visits by Advisor and Subject]]</b>
* <b>[[TracCloud_Report:_Visits_by_Assigned_Advisor_and_Student|Visits by Advisor and Subject]]</b>
<hr>
<hr>
All other permissions for Staff-level accounts are determined by [[TracCloudGuideProfileGroups|permission group]].
All other permissions for Staff-level accounts are determined by [[TracCloudGuideProfileGroups|permission group]].


|}
[[Category:TracCloud Manual]]
[[Category:TracCloud]]
</div>

Latest revision as of 21:13, 2 December 2025

Staff User Level

Every Staff account in TracCloud is assigned a User Level, SysAdmin, Super Admin, Profile Admin, or Staff. These levels impose restrictions on the selected account that go beyond what you can control with just a permission group. This article goes over the exact differences between these levels.

Unique to SysAdmin Accounts

SysAdmin accounts provide the highest level of access in your Trac System, that includes potentially sensitive data, utilities to modify data in bulk, and the ability to edit technical aspects of your TracCloud instance. Here are the options that only System Administrators can access.

  • Saved Searches - Specifically the menu to manage or delete Saved Searches, other User Levels can still save and access their personal Saved Searches.
  • Utilities for merging or modifying data in bulk - The ability to merge, delete, or modify individual records is determined by Permission Group.
  • Access to the "Delete Selection" option on some listings - Students, Staff, and Faculty listings.
  • The ability to edit locked Visits - In other words, SysAdmins can override the 'Lock visits older than' setting in your Profile.
  • The ability to delete Reasons - Other users can still deactivate or modify Reasons, just not delete.
  • The ability to set a custom "From" address when emailing users.
  • Lookup Values
  • Audit Logs


And of course, some of the more obvious ones...

  • The ability to set other users as SysAdmin

Super Admin level or higher

Super Admins are similar to Profile Admins, but with a few minor additions and the ability to provide access to select global preferences. Access to global preferences is configured in the super admin's staff account, next to 'Linked Centers.' Aside from the specific global preferences, here are the options that only Super Admins and SysAdmins have access to.

  • Profile-specific Group Entry - Super Admins/SysAdmins can open Permission Groups within a specific Profile, to access only that Profile's Center choices.
  • SAGE referral types - Specifically the ability to modify Referral Types and Emails, other users can still submit Referrals for Students (assuming their Group allows it).

Profile Admin level or higher

Profile Admins still have access to many important settings and functions in TracCloud, and will be the ideal level for most of your "admin" accounts. Options like Profile Preferences and Group Management are still available, but potentially dangerous or sensitive utilities are hidden. Here are the options that only Profile Admins, Super Admins, and SysAdmins can access.

  • The ability to modify a staff member’s user level - I.e., 'Staff' level accounts can only create other 'Staff' level accounts, Profile Admins can create Profile Admins or Staff.
  • The ability to modify the assigned Group and Centers of other staff. Group is filtered to only groups assigned to the same profile of the current user's primary center.
  • Access to the "Delete Selection" option on some listings - Appointments, Course Lists, Documents, Referrals, Registrations, Success Plans, and Attendance listings, if their group has table access for said listing.

And a few Reports:


All other permissions for Staff-level accounts are determined by permission group.