Administrator roles and permissions
Administrator roles and permissions determine the scope of actions, or ‘what’ Administrators can do in the system. Use these tools to grant Administrators the appropriate level of control over system functions.
To further refine access, you can use resource access policies. Resource access policies define which specific system resources Administrators can manage.
Roles
A role is a predefined set of permissions grouped together. It acts as a container for access rights and determines what actions an Administrator can perform in DreamApply.
Assigning roles is a recommended way to manage access in DreamApply. It simplifies permission management and reduces the risk of errors. Instead of manually granting individual permissions, you can assign Administrator roles that automatically grant the correct access rights.
DreamApply offers several predefined roles that include the most commonly needed permissions for admission team members. You can:
- Assign predefined roles
- Combine several roles
- Create your own Administrator roles
Permissions
Permissions define what actions an Administrator can perform in DreamApply. Each permission grants access to one distinct function such as:
- Configuring instance settings
- Editing applications
- Managing fees
DreamApply uses a granular permission model. This means that permissions are distinct and do not “roll up” into one another. For example:
- To view the journal, an Administrator must have the
journal-viewpermission. - To edit the journal, they need the
journal-viewandjournal-editpermissions.
The journal-edit permission does not inherently grant the journal-view permission, both are required for full edit functionality.
You can manually assign permissions to Administrators or supplement predefined roles with additional permissions. However, this approach should be used with caution, as it may lead to errors and potentially leave Administrators without the access they need for their daily tasks.