Administrator roles and permissions

Administrator roles and permissions determine the scope of actions, or ‘what’ Administrators can do in the system. Use these tools to grant Administrators the appropriate level of control over system functions.

To further refine access, you can use resource access policies. Resource access policies define which specific system resources Administrators can manage.

Roles

A role is a predefined set of permissions grouped together. It acts as a container for access rights and determines what actions an Administrator can perform in DreamApply.

Assigning roles is a recommended way to manage access in DreamApply. It simplifies permission management and reduces the risk of errors. Instead of manually granting individual permissions, you can assign Administrator roles that automatically grant the correct access rights.

DreamApply offers several predefined roles that include the most commonly needed permissions for admission team members. You can:

Permissions

Permissions define what actions an Administrator can perform in DreamApply. Each permission grants access to one distinct function such as:

  • Configuring instance settings
  • Editing applications
  • Managing fees

DreamApply uses a granular permission model. This means that permissions are distinct and do not “roll up” into one another. For example:

  • To view the journal, an Administrator must have the journal-view permission.
  • To edit the journal, they need the journal-view and journal-edit permissions.

The journal-edit permission does not inherently grant the journal-view permission, both are required for full edit functionality.

You can manually assign permissions to Administrators or supplement predefined roles with additional permissions. However, this approach should be used with caution, as it may lead to errors and potentially leave Administrators without the access they need for their daily tasks.