Roles

{hidden-data}
* The first paragraph is very similar to [Roles and People]. Check if they need updating too.
{hidden-data}
{addthis-icons}
\\


{anchor:top}
{section}
{column}
In Facility Scheduler, you control the security of your dataset by assigning roles to [users|Users#assignroles|Assigning Roles]. Users are people who can log in to and use Facility Scheduler. Roles determine the permissions of users, including what calendars they can view and what actions they can perform. Roles are also a time-saving feature: you can assign the permissions to a role, and then assign that role to several users. This way, you don't have to tediously assign the permissions for each user one-by-one.

{tip:title=Create Roles Before Users}
If you are setting up Facility Scheduler for the first time, we recommend creating roles before users. Doing so speeds up the process of assigning permissions to users. See [Adding Roles|#AddingRoles].
{tip}

{column}
{column:width=30%}
{panel:borderStyle=solid|borderColor=#3C78B5|borderWidth=3|bgColor=white}
h2. On this page
{toc:maxLevel=1|exclude=Related Topics}

{panel}
{column}
{section}

\\
\\
{anchor:builtin}
h1. Built-in Roles
Just as it includes [built-in users|Users#builin|Built-in Users], Facility scheduler includes three built-in roles: Administrator, Member, and Guest. These are common roles that you will probably assign to many of your users.

*Administrator* --- The Administrator role is the only role that has permissions to manage roles and users. No other roles can manage roles and users. The Administrator role also gives access to all calendars. The Administrator role does _not_ include permissions to unlock user accounts, manage resource labels, site information, and password requirements. See [Administrator Permissions|Users#createadmin|Administrator Permissions] to learn about adding these permissions. For security purposes, you cannot edit or delete the Administrator role. (It doesn't appear in the Roles window for this reason.)

*Member* --- By default, the Member role includes permissions to view published events and add new events. You can change these permissions and delete the Member role as you see fit.

*Guest* --- The Guest role only allows the user to view published events. For security purposes, you cannot edit or delete the Guest role. (It doesn't appear in the Roles window for this reason.)

{hidden-data}
Facility Scheduler uses roles to determine which parts of the software and which data users can access. Different roles are granted different permissions. When users are added, they are assigned roles and inherit the permissions granted to those roles.

Roles can be assigned to role types. When a role type is assigned to a user, the user inherits all of the roles in the role type, and by extension, all of the permissions granted to those roles.{hidden-data}

\\
\\
{return-to-top}
{anchor:AddingRoles}
h1. Adding Roles
You can create an unlimited number of roles to assign to users. Examples of roles include:
* Childcare Volunteer --- add and edit permissions to nursery, child Sunday School, and VBS calendars
* Childcare Coordinator --- all permissions to nursery, child Sunday School, and VBS calendars
* Calendar Operator --- all permissions to all calendars, but no permission to reports or people

As we illustrate above, it is common to have both "volunteer" and "coordinator" roles for related calendars. Volunteer roles are usually limited to add and edit permissions for specific calendars. The corresponding coordinator roles usually have all permissions to the same calendars. You may also have calendar operators who make sure the your Facility Scheduler dataset is clean and up-to-date.

{note:title=Role Types} In the role type list, you can select Member, Guest, or \[Custom Role Type\]. Unless you have advanced knowledge of Facility Scheduler, we strongly recommend selecting *\[Custom Role Type\]* for any roles you create. Selecting \[Custom Role Type\] means that the role functions independently of a role type. Roles types are handy if you know how to use them. However, if not set up properly, you can accidentally give roles and users [more permissions than you intended|Why Do Some Users Have More Permissions than They Should?]. To learn more, see [Role Types].{note}

{expand:title=To add a new role}
# On the *Administration* tab, click *Roles*.
# In the *Actions* group, click *Add Role*.
# Enter the *Name* of the role.
# In the *Role Type* drop-down list, select *Custom Role Type*. (Selecting any other [role type|Role Types] is only recommended for advanced administrators of Facility Scheduler.)

You have created the role. However, the role isn't much use without permissions assigned to it. {expand}

\\
\\
{return-to-top}
{anchor:permissions}
h1. Assigning Permissions
When you change the permissions for a role, the permissions for all users assigned to that role are updated.

You can manage permissions in the these areas:
* People --- Add, edit, and delete individuals
* Reports --- View and print reports (based on permissions to specific calendars)
* Scheduler (All Calendars) --- Create and manage all calendars, event types, resources, resource categories, and tags
* Individual Calendars --- Specific permissions for each calendar

For each calendar, you can manage these permissions:
* Booking restricted resources
* Approving, canceling, and confirming events
* Publishing events
* Adding, deleting, viewing, and editing events
* Selecting tags

{expand:title=To assign permissions to a role}
# On the *Administration* tab, click *Roles*.
# Select the role.
# In the *Actions* group, click *Edit Role*.
# Under *Permission Summary*, click *Edit*.
# Select the permissions you want the role to have.
# Click *OK*.
# In the *Actions* group, click *Save & Close*.

{tip:title=Shortcuts} To quickly give all permissions to all calendars, under *Scheduler*, select *All Rights to all Calendars*. To quickly give or remove permissions to all actions, at the bottom, click *Add All* or *Remove All*.{tip}{expand}

h2. Editing Events Permissions
When you are assigning permissions, keep in mind that users with only _edit_ permissions can only edit events with a _pending_ status. They cannot edit an event once it has been approved or confirmed. To edit approved or confirmed events, users must also have approve and confirm permissions.

\\
\\
{return-to-top}
{anchor:deleting}
h1. Deleting Roles
As long as the role is not assigned to any users, you can delete roles that you no longer need. You cannot delete the [Administrator|#builtin|Built-in Roles] or [Guest|#builtin|Built-in Roles] roles.

{expand:title=To delete a role}
# On the *Administration* tab, click *Roles*.
# Select the role.
# In the *Actions* group, click *Delete Role*.
# Click *Yes* to confirm that you want to delete the role.
{expand}

\\
\\
{return-to-top}
{related-topics:display=no-children}
[Users]
[Role Types]
[Roles and People]
{related-topics}
{rate}