When adding a new user or editing an existing user, you'll need to choose what their User Role should be. This guide outlines the differences between the roles to help you choose what type of user each of your users should be.
There are four user roles within Watershed, each with different access to data and features:
Related: How do I know what my users can see?
Global Admin
Global Admin users have full access to an organization's settings and can see every learner’s data. They can also add new users, set up and configure reports, and organize their company's structure.
Global Admin logins can:
- see all data.
- see all dashboards.
- invite new users.
- create new shared dashboards.
- create new reports on any shared dashboard.
- edit reports on all shared dashboards.
- create/edit Organization Hierarchy via CSV upload.
- create new data source connections.
- edit any user's User Role.
- edit any user's data permissions.
- edit any user's report builder access.
- edit any user's Dashboard permissions.
- create, edit, and delete all measures.
Area Admin
The Area Admin role is designed for users who need some administrative permissions, but should not have access to all data and all users. They have many of the same permissions as Global Admins, but those permissions are restricted to a certain population. For example, a global organization might have teams of Area Admins responsible for each territory.
Area Admins can:
- see all data about people in groups they have permissions for.
- invite new users.
- delete, edit, and assign permissions to users created by themselves and other Area Admins in the same group.
- create, edit, move, group, and delete reports on all dashboards they have permission to view.
- create, edit, set permissions for, and delete dashboards they have permission to view.
- create, edit, and delete all measures, regardless of who created them.
- Use Data Search.
Area Admins cannot:
- see data about people outside of groups they have permissions for.
- delete, edit, and assign permissions to users created by Global Admins and Area Admins for other groups.
- assign global admin permissions.
- assign data permissions for data that they cannot themselves see.
- assign permissions to people outside their group.
- create/edit Organization Hierarchy via CSV upload.
- create new data source connections.
- edit report builder access.
- reorder dashboards or measures.
- edit dashboard categories.
Please Note: The measures in Measure Editor are shared across all dashboards and groups. It is therefore possible for Area Admins to edit and delete measures created by Area Admins in another group. We recommend training Area Admins to take extra care when working with existing measures.
User
The User Role "User" is the most basic User Role within Watershed and can see the fewest features and data. By default, User accounts can only see their own data. An Admin login could grant permission to a User login to see more data than their own. User logins can only change settings directly related to their own login.
User logins can: (Please note: the optional features are decided by Admins)
- see their own data.
- see additional users' data as prescribed by data permissions.
- see the Your Reports dashboard.
- see additional dashboards as prescribed by dashboard permissions.
- create new reports on the Your Reports dashboard. (optional)
- edit existing reports and save to the Your Reports dashboard. (optional)
- copy reports from dashboards to the Your Reports dashboard.
User logins cannot:
- invite new users.
- create new shared dashboards.
- create new reports on any shared dashboard.
- edit reports on shared dashboards.
- create/edit Organization Hierarchy via CSV upload.
- create new data source connections.
- edit any user's data permissions.
- edit any user's report builder permissions.
- edit any user's Dashboard permissions.
Consultant
Please note: Not all accounts have access to the User Role "Consultant."
The User Role "Consultant" allows you to create users that cannot see personally identifiable information as defined by the xAPI spec. This means that the following information is blocked from all parts of the account, including reports:
- Learners' names (actor.person.name, actor.name)
- Learners' customIDs (actor.person.customId)
- Learners' personas (actor.person.personas.*)
- Learners' email addresses (actor.mbox, actor.person.email)
- Learners' account IDs (actor.account.*)
If personally identifiable information were contained in xAPI extensions (a survey answer for example), Watershed would show all of the data contained in the extension.
By default, Consultant accounts can only see their own data. An Admin login could grant permission to a Consultant login to see more data than their own.
Consultant logins can: (Please note: the optional features are decided by Admins)
- see their own data.
- see additional users' data as prescribed by data permissions.
- see dashboards as prescribed by dashboard permissions.
Consultant logins cannot:
- access report builder.
- create new reports on the Your Reports dashboard.
- edit existing reports and save to the Your Reports dashboard.
- copy reports from dashboards to the Your Reports dashboard.
- invite new users.
- create new shared dashboards.
- create new reports on any shared dashboard.
- edit reports on shared dashboards.
- create/edit Organization Hierarchy via CSV upload.
- create new data source connections.
- edit any user's data permissions.
- edit any user's report builder permissions.
- edit any user's Dashboard permissions.