Administrator Topic

Permissions for Learning

This page contains permissions that may apply to organizations using the Learning solution.

PERMISSION NAME PERMISSION DESCRIPTION CATEGORY
Connect - View

Enables users to access Connect live feed and profile screens. This is an end user permission.

Note: This permission applies to the legacy version of Connect.

Connect
Connect Administration

Grants access to create, edit and delete Connect topics, including designating topic moderators, topic availability and posting types allowed within topics. This is an administrator permission.

Note: This permission applies to the legacy version of Connect.

Connect - Administration
Connect Community Management

Enables users to manage Connect communities for which they are designated leaders. This permission should be included in the Connect Community Leader security role, which is dynamically assigned to users who are designated as leaders to one or more Connect communities.

Note: This permission applies to the legacy version of Connect.

Connect
Connect Preferences - Manage

Enables users to configure Connect preferences. This is an administrator permission.

Note: This permission applies to the legacy version of Connect.

Connect - Administration
Connect Topic Expert

Enables users to answer questions in Connect topics for which they are a designated expert. This permission should be included in the Connect Topic Expert security role, which is dynamically assigned to users who are designated as "experts" for one or more Connect topics.

Note: This permission applies to the legacy version of Connect.

Connect
Connect Topic Management

Enables users to manage Connect topics which they are designated moderators. This permission should be included in the Connect Topic Moderator security role, which is dynamically assigned to users who are designated as "moderators" for one or more Connect topics.

Note: This permission applies to the legacy version of Connect.

Connect
Connect User Search

Use of this permission enables you to constrain the people search results within Connect. Without adding a constraint, this permission has no impact to the user. If constrained however, the people found in a Connect search will be limited accordingly.

Note: This permission applies to the legacy version of Connect.

Connect
MyTeam Connect Profile - Manage Allows manager to view limited Connect data for their direct and indirect reports (or others depending on constraints) via the MyTeam screen. This permission can be constrained by OU, User's OU, User's Direct Reports, User, and User Self and Subordinates. The permission constraints determine for which users the Connect link is available when viewing a user in My Team. Note: By design, for any My Team permission that is included in the Manager default security role, all of the manager's direct and indirect reports are included in the constraints, even if they are not selected in the permission constraints for the role. Note: If the user's permission is also constrained by User Self and Subordinates, then this overrides the User's Direct Reports constraint.

Note: This permission applies to the legacy version of Connect.

 Connect
PERMISSION NAME PERMISSION DESCRIPTION CATEGORY
Access FTP Account - View Grants access to the FTP account landing page where the available accounts are displayed. Currently, this permission cannot be constrained. Core Administration
Access Partner Authorization - Manage Grants ability to manage partner authorized access to portal via Partner Access Administration. This permission cannot be constrained. This is an administrator permission. Core Administration
Announcements - Post Grants ability to view, create and update/edit announcements that will appear to populations of users via the Welcome Page Inbox widget or Announcements page. This is an administrator permission. Core
Announcements - View Grants ability to view announcements created by others, via the Welcome Page Inbox widget or the Announcements page. This is an end user permission. Core
Authentication Preferences - Manage Grants ability to configure which credentials are used for authentication/re-authentication purposes throughout the system. This permission works in conjunction with the preferences that are set within each workflow that uses authentication/re-authentication. This permission can be constrained by OU and User's OU. This is an administrator permission. Core Administration
Available Languages - Modify Grants access to choose what languages to which learning objects may be associated when users search for training. This is an administrator permission. Core Administration
Badge & Point Preferences - Manage Enables user to access and edit preferences on the Badge & Point Preferences page. The availability of this permission is controlled by a backend setting. This permission can be constrained by OU and User's OU. This is an administrator permission. Core Administration.
Batch Edit Users Grants ability to modify user records in bulk. This permission cannot be constrained. This is an administrator permission. Core Administration
Bypass IP Security Controls Grants ability to bypass defined IP Security restrictions, allowing user to log in to the portal from IP addresses that are not authorized via the IP Whitelist screen. This is an administrator permission recommended only for system administrators. Core Administration
Capabilities - Skills Profile - View Grants ability to view an employee Skills Profile. Users who have this permission may view the Skills Profile for anyone in the organization. However, individual ratings have privacy settings that control visibility within the Skills Profile. This permission cannot be constrained. This is an end user permission. Core Administration
Capability Library - Edit Grants ability to create, edit, and copy capabilities via the Capability Library. Administrators with this permission cannot delete capabilities or change the status of a capability. This permission cannot be constrained. This is an administrator permission. Core Administration
Capability Library - Manage Grants ability to create, edit, copy, delete, import, and approve capabilities via the Capability Library. This permission cannot be constrained. This is an administrator permission. Core Administration
Capability Preferences - Manage Grants ability to create and edit expertise levels and rating scales for capabilities via Capabilities Preferences. This permission cannot be constrained. This is an administrator permission. Core Administration
Care ? Community Grants access to the Success Center link in Navigation Tabs and Links. This page enables administrators to use Single Sign On (SSO) to access the Success Center directly from their portal. This is an administrator permission. Core Administration
Change User Passwords - Administrator Grants ability to change the portal password of another user. This permission works in conjunction with the Users - View permission. This permission can be constrained by User's Corporation, OU, User's OU, User's Self and Subordinates, and User. This is an administrator permission. Core Administration
Connect FTP Folders - Manage Grants ability to connect to an FTP folder from the FTP Account Access page. This permission can be constrained by FTP Account. When constraining this permission, administrators can select any FTP account that has been associated with the portal. The constraints on this permission determine to which FTP accounts the administrator can connect. This is an administrator permission. Core
Corporate Logo List - View Grants access to select header logo from the corporate list of images. User must also have Display Preference permission. This is an administrator permission. Core Administration
Corporate Preferences - Manage Grants ability to manage Corporate Preferences, which includes several portal-wide settings. This is an administrator permission. Core Administration
Corporate Preferences: Lockout Preferences - Manage Grants ability to configure the Lockout Preferences on the Corporate Preferences page. This permission cannot be constrained. This is an administrator permission. Core Administration
Custom Login Page - Manage Grants access to create and edit custom login pages for the portal. Administrators with this permission can also enable or disable a custom login page and identify the default login page. This permission cannot be constrained. This is an administrator permission. Core Administration
Custom Pages - Manage Grants access to create and edit custom pages for the portal. This permission cannot be constrained. This is an administrator permission. Core Administration
Deep Link: Base URL Control Allows administrator to define the Base URL for all SSO module links. This is an administrator permission. Core Administration
Deep Link: Manage Allows administrator to define the Base URL for all SSO module links. This permission cannot be constrained. This is an administrator permission. Core Administration
Deep Link: View Modules Allows administrator to view the deep links URLs. This is an administrator permission. Core Administration
Define Fiscal Year Grants ability to set the fiscal year for aggregating annual training hours completed by users for display on the transcript page. This is an administrator permission. Core Administration
Display Preferences - Manage Grants ability to configure Display Preferences, including Navigation Tab theme and settings and header logo displayed to end users. This is an administrator permission. Core Administration
Display Preferences - Upload Logo Grants access to upload an image on the Display Preference Page. User must also have Display Preference permission. This is an administrator permission. Core Administration
Duplicate User Management Preferences - Manage Grants ability to access and configure management of duplicate records, including parameters used to prevent duplicates. This permission cannot be constrained. This is an administrator permission. Core Administration
Email - Edit From Address Grants ability to edit the "from" address when creating or modifying an email trigger. In addition, the Allow user to change email address option must be selected in Email Preferences. This permission works in conjunction with the Global Email Administration - Manage permission. This is an administrator permission. Core Administration
Email Preferences - Manage Grants ability to manage Email Preferences, which includes defining end users' ability to change their email address and the associated email notifications when emails are changed. This is an administrator permission. Core Administration
Employee Recognition Preferences - Manage Grants ability to create and edit employee recognition awards for use by end users. This is an administrator permission. Core Administration
Form Completion - View and Edit OU and Employee Relation Fields Allow users to view and modify organizational unit (OU) and employee relation fields when completing a form that contains the fields. The constraints on this permission determine which fields the user can view and edit when completing a form. This permission can be constrained by OU, User's OU, User, User Self and Subordinates, and User Subordinates. This is an end user permission. Core
Global Email Administration - Manage Grants ability to manage email trigger templates across all active modules in the portal. Enables creating, editing and deleting email message templates for various system actions and workflows. This permission can be constrained by OU, User's OU, User Self and Subordinates, and User. This is an administrator permission. Core Administration
Global Email Administration - View Grants view only access to email templates/triggers and email logs at the global level for the portal. This permission can be constrained by OU, User's OU, User Self and Subordinates, and User. This is an administrator permission. Core Administration
Global Search - People

Grants ability to search for people via Global Search. If this permission is constrained to a specific OU, then that constraint is automatically applied within Global Search, including search filters and search results. This is an end user permission. The availability of this permission is controlled by a backend setting.

Note: In Universal Profile > Bio > Career Preferences, this permission is required for users to search for jobs.

Core
Global Search Preferences - Manage Grants ability to configure Global Search Preferences. This is an administrator permission. The availability of this permission is controlled by a backend setting. This permission can be constrained by OU and User's OU. By default, this permission is constrained to the organization. Core Administration
Grades - View Grants ability to view the Grade Organizational Unit throughout the system, such as in availability drop down selectors, when editing users, etc. Those without this permission do not see the Grade OU on any screen. This is primarily an administrator permission, although organizational policy should determine whether the Grade OU should be visible to end users on reporting screens, etc. Core Administration
Grant Employee Recognition Enables users to grant recognition awards to others, using a predefined list of awards created by administrators. This is an end user permission. Core
Help Link - Manager Provides access to view the User and Manager topics in online help. This is a manager permission. Core
Help Link - System Administrator Provides access to view the User, Manager and System Administrator topics in online help. This is an administrator permission. Core
Help Link - User Provides access to view the End User topics in online help. This is an end user permission. Core
Insights Dashboard Allows user to access Insights Dashboard. This permission cannot be constrained. Core
Language Preferences - Manage Grants ability to set default language for portal/OU and set whether end users may adjust their own portal display language. This is an administrator permission. Core Administration
Log In Message - Manage Grants access to create a message that appears upon portal login to all users or a selected group/subset of users. This is an administrator permission. This permission can be constrained by OU and User's OU. Core Administration
Marketing Email Templates - Manage Grants ability to create and save Marketing Email Templates, which can be reused to send future marketing email messages to users. This is an administrator permission. Core Administration
Marketing Emails - Manage Grants ability to create and send ad hoc emails to populations of users based on their assigned org units, groups, or by user name. This is an administrator permission. Core Administration
My Account - Manage Allow users to view and modify their preferences on the My Account screen. The user must have this permission to access My Account. This permission cannot be constrained. This is an end user permission. Core
My Account Devices - Manage Manage device registrations from My Account. This permission cannot be constrained. This is an end user permission. Core
My Account Preferences - Manage Grants access to the My Account Preferences page, which allows selection of which custom fields display in My Account by OU. Define whether custom fields appear as read only or are editable, and whether entry is required. Also provides ability to customize the names of the tabs that appear in My Account. This is an administrator permission. Core Administration
My Account Social - Manage Grants ability to view and manage third party profile connections on the Social page in My Account. This is an end user permission. Core
MyTeam - Print Grants ability to configure and print out a My Team profile. Note: By design, for any My Team permission that is included in the Manager default security role, all of the manager's direct and indirect reports are included in the constraints, even if they are not selected in the permission constraints for the role. Core
MyTeam Comments - Manage Grants ability for manager (or others depending on constraints) to view Comments previously entered about their direct and indirect reports and also create new comments as well as attach files to comments. This permission can be constrained by OU, User's OU, User's Direct Reports, User, and User Self and Subordinates. The permission constraints determine for which users the Comments tab is available when viewing a user in My Team. Note: By design, for any My Team permission that is included in the Manager default security role, all of the manager's direct and indirect reports are included in the constraints, even if they are not selected in the permission constraints for the role. Note: If the user's permission is also constrained by User Self and Subordinates, then this overrides the User's Direct Reports constraint. Core
MyTeam Search by OU Grants ability to allow users to search by division and position when viewing MyTeam. The constraints upon this permission determine the OUs that are available within the search. Note: By design, for any My Team permission that is included in the Manager default security role, all of the manager's direct and indirect reports are included in the constraints, even if they are not selected in the permission constraints for the role. Core
My Team/Talent Profile Preferences Grants ability to set display preferences for the My Team and Talent Profile screens. This permission cannot be constrained. This is an administrator permission. Core Administration
Navigation Tabs and Links - Manage Grants ability to manage Navigation Tabs and Links for the portal. This permission can be constrained by OU, User's OU, and User's Corporation. This is an administrator permission. Core Administration
Organizational Unit Custom Fields - Manage Grant Access to create and edit custom fields for Org Units. This is an administrator permission. Core Administration
Org Chart - Preferences

Grants access to the Org Chart Preferences page. This permission cannot be constrained.

 Core
Org Chart - View Grants access to the new Org Chart page for organizations with Cornerstone HR, Succession, or View. This permission can be constrained by OU, User’s OU, Users, User’s Self, User Self and Subordinates, User’s Manager, User’s Superiors, Employee Relationship, User’s Direct Subordinates, User's Subordinates. Core
Org Chart by Organization - View

Grants access to the Organization tab on the new Org Chart page. This permission cannot be constrained. This permission works in conjunction with the Org Chart - View permission. For users who do not have this permission, the Organization tab will not be available.

Note: This permission pertains to the new Org Chart functionality that is released with the February '17 release. The new Org Chart functionality is only available for organizations with Cornerstone HR, Succession, or View.

Core
OU Group - Manage Grants ability to create, copy, and update/edit custom groups of users without allowing ability to manage org units. This permission can be constrained by OU, User's OU, and Provider. This is an administrator permission. Core Administration
OU Group - Update Grants access to edit existing custom groups of users. This permission can be constrained by OU, User's OU, and Provider. This is an administrator permission. Core Administration
OU Group - View Grants access to view existing custom groups. This permission can be constrained by OU. This is an administrator permission. Core Administration
OU Hierarchy - Manage Grants ability to create and update/edit organizational units. This permission grants access to all OU types, both standard and custom. This permission can be constrained by OU and User's OU. This is an administrator permission. Core Administration
Password Preferences - Manage Grants ability to manage Password Preferences, which includes specifying the settings for users to change their own password, or for the system to generate an anonymous password, set the specific password requirements and allowing users to reset password by answering security questions. This permission can be constrained by OU and User's OU. This is an administrator permission. Core Administration
Prevent Duplicate Users - Reconcile Grants ability to view user accounts that have been identified as potential duplicates. Administrators can only view pending user records that were created by administrators who are within the constraints on this permission. This permission can be constrained by OU and User's OU. This is an administrator permission. Core Administration
Proxy as User Grants ability to log in as another user via proxy, for purposes of troubleshooting user issues. This is an administrator permission. The users to which the administrator has access to log in as is controlled by the users to which the administrator has access on the Users page and by the constraints upon this permission. This permission can be constrained by OU, User's OU, User Self and Subordinates, and User. By default, this functionality is not available for any users, including administrators. To request this permission, contact Global Customer Support. Core Administration
Report Delivery Preferences Provides access to report delivery preferences, which enables administrators to set the preferences related to custom report delivery. This permission can be constrained by OU and User's OU. This is an administrator permission. Core Administration
Reset Password and Public Keys - Manage Grants ability to manage FTP account login password and public keys when applicable. Currently, this permission cannot be constrained. Core Administration
Security Administration - General Constraints Grants access to apply general constraints to permissions when creating/editing a security role. This permission works in conjunction with the Security Administration - Manager permission. This is an administrator permission. Core Administration
Security Administration - Manage Grants ability to create, modify and constrain security roles within the portal, and assign users to those security roles. This permission can be constrained by OU, User's OU, User, and User Self and Subordinates. This is an administrator permission. Core Administration
Self Registration Groups - Manage Grants ability to create and update/edit self-registration groups, which are configured to make a self-registration page available to people who are not added to the portal via user feed. This permission can be constrained by OU, User's OU, and User's Corporation. This is an administrator permission. Core Administration
Self Registration Groups - View Grants ability to view Self Registration Groups when selecting Availability (for Training, Tasks, learning assignments, etc.) or User Criteria (for Learning Assignments). This permission can be constrained by OU and User's OU. This is an administrator permission. Core Administration
Self-Registration and User Record Custom Fields - Manage Grants access to manage custom fields for user Self Registration and the user record in Custom Field Administration. This permission can be constrained by OU and User's OU. This is an administrator permission. Core Administration
Share Manager/Approver Permissions Enables managers and approvers to delegate certain types of approvals and MyTeam viewing permissions to others. This permission is only relevant to managers and approvers. Core
Single Sign On - CSOD Certificate Grants ability to view, manage, and upgrade SSO certificates and configurations. This is an administrator permission. This permission cannot be constrained. Core Administration
SSO Link to Cornerstone Success Center Grants access to an in-portal link to the Cornerstone Success Center sign in page. This is an administrator permission that should be limited to authorized client users of the Cornerstone Success Center. Core Administration
Support Information - Manage Grants ability to manage Support Information, which includes specifying an email address and phone number for end users to contact for portal support. This permission works in conjunction with the Corporate Preferences permission. This is an administrator permission. Core Administration
Task - View Grants ability to view assigned tasks via Scheduled Tasks screen and Welcome Page My Tasks widget. This is an end user permission. Core
Time Zone Preferences - Manage Grants ability to set default time zone for portal/OU and set whether end users may adjust their own portal time zone. This is an administrator permission. Core Administration
Training Data Merge - Manage Grants ability to merge the training records of multiple existing accounts and deactivate one of the accounts, if necessary. The availability of this permission is controlled by a backend setting. This permission can be constrained by OU, User's OU, User Self and Subordinates, and Users. The applied constraints limit the users that are available to be merged and that are displayed in the History section. This is an administrator permission. Core Administration
Training Data Merge - View Grants ability to view past training record merges. The availability of this permission is controlled by a backend setting. This permission can be constrained by OU, User's OU, User Self and Subordinates, and Users. Which records are displayed in the History section is dependent on creator constraints. This is an administrator permission. Core Administration
Universal Profile - User Record - Create Users Grants ability to access the User Record Administration page and to create new users in the system. When creating a new user, this permission grants the ability to add general information, which includes first name, last name, username, assigned OUs, and custom relationships. The administrator must have additional permissions to add any additional fields. This permission can be constrained by OU, User's OU, User's Self, User Self and Subordinates, and User. This is an administrator permission. Core Administration
Universal Profile - User Record - Edit Users Grants ability to edit user records in the system. The administrator must have additional permissions to edit specific fields on the user record. This permission can be constrained by OU, User's OU, User's Self, User Self and Subordinates, and User. This is an administrator permission. Note: This permission DOES NOT grant the ability to view user records in the system. Administrators must have the Universal Profile - User Record - View Users permission in order to view user records. Core Administration
Universal Profile - User Record - View Users Grants ability to view user records in the system. Administrators can view the Modification History page for user records within their constraints. The administrator must have additional permissions to view specific fields on the user record. This permission can be constrained by OU, User's OU, User's Self, User Self and Subordinates, and User. This is an administrator permission. Core Administration
User - Edit Absent Status on My Account Page Allows user to change absent status on My Account page. This is an end user permission. Core
User Preferences - Core Information: View Grants ability to view the User Preferences administrator page. This permission does not allow administrators to modify the preferences. This permission cannot be constrained. This is an administrator permission. Core Administration
User Preferences - Leave Types: Manage Grants ability to manage Leave Types on the User Preferences administrator page. Administrators must also have the User Preferences - Core Information: View permission to access the User Preferences page. This permission cannot be constrained. This is an administrator permission. Core Administration
User Preferences - Reasons for Change: Manage

Grants ability to define and configure Reasons for Change on the User Preferences administrator page, which may be used when modifying the user record. The administrator must also have the User Preferences - Core Information: View permission to access the User Preferences page.

This permission is also required to view and set the Reason for Change field when editing a user record.

This permission cannot be constrained. This is an administrator permission.

 Core Administration
User Preferences - Termination Reasons: Manage Grants ability to manage Termination Reasons on the User Preferences administrator page. Administrators must also have the User Preferences - Core Information: View permission to access the User Preferences page. This permission cannot be constrained. This is an administrator permission. Core Administration
User Preferences - User Statuses: Manage Grants ability to manage User Statuses on the User Preferences administrator page. Administrators must also have the User Preferences - Core Information: View permission to access the User Preferences page. This permission cannot be constrained. This is an administrator permission. Core Administration
User Preferences - User Types and Subtypes: Manage Grants ability to manage User Types and Subtypes on the User Preferences administrator page. Administrators must also have the User Preferences - Core Information: View permission to access the User Preferences page. This permission cannot be constrained. This is an administrator permission. Core Administration
User Rating Scales - Manage

Grants ability to manage rating scales for capabilities. This permission cannot be constrained. This is an administrator permission.

This permission only works when used in conjunction with the User Rating permission.

 Core Administration
User Rating Templates - Manage

Grants ability to manage feedback templates for capabilities. This permission cannot be constrained. This is an administrator permission.

This permission only works when used in conjunction with the User Rating permission.

 Core Administration
User Ratings - View Ratings About Other Users Grants ability to view ratings history and rating details about other people regardless of the visibility settings on the ratings. This permission does not bypass visibility ratings about yourself, which means users cannot use this permission to view ratings provided about themselves that are otherwise not visible to them. This permission is intended for an administrator or talent partner who needs broad access to all ratings occurring within the portal. This permission cannot be constrained. Core Administration
User Ratings For end users, this permission grants ability to perform ratings and view ratings. For administrators, this permission is required along with the specific user ratings administration permissions to edit rating scales or templates. This permission cannot be constrained. Core Administration
User Record Custom Field Configurable Validations - Manage Grants ability to manage the configurable validations for user record custom fields within Custom Field Administration. This permission cannot be constrained. This is an administrator permission. This permission is only available to organizations that are using Cornerstone HR. Core Administration
User Upload Photo Enables users to upload their photo to their user record, via the My Account screen. This is an end user permission. Core
Users - Edit Bypass User Purging Grants ability to set individual users to bypass user purging on the Edit Users page. This permission only works when used in conjunction with the Users - View and Users - Edit permissions. This permission cannot be constrained. This is an administrator permission. The availability of this permission is controlled by a backend setting. To enable this functionality, contact Global Customer Support. Core Administration
Users - Edit Core Information

Grants ability to add users and edit core information on a user record, including first name, last name, username, assigned OUs, and custom relationships. This permission works in conjunction with the Users - View and Users - View Core and Edit Custom Fields permissions. This permission cannot be constrained. This is an administrator permission.

Note: When the User Record Redesign is enabled in a portal, this permission is disabled. Administrators who previously had this permission are automatically assigned the following permissions:

  • Universal Profile - User Record - Create Users
  • Users - Edit General Information

This permission is obsolete following the retirement of the legacy User Record in the May '17 release.

 Core Administration
Users – Edit Custom Field Information Grants ability to view and edit the custom fields on a user record. Administrators are only able to edit a custom field on a user's user record if the user is within their permission constraints and the administrator is within the availability of the custom field. This permission works in conjunction with the Users - View permission. This permission can be constrained by OU, User's OU, User's Self, User Self and Subordinates, and User. This is an administrator permission. Core Administration
Users – Edit General Information Grants ability to edit the general fields on a user record, including first name, last name, username, assigned OUs, and custom relationships. This permission works in conjunction with the Users - View permission. This permission can be constrained by OU, User's OU, User's Self, User Self and Subordinates, and User. This is an administrator permission. Core Administration
Users - Edit Local System ID Enables administrator to modify the Local System ID for a user via the admin/users screen. This permission only works when used in conjunction with the Users - View and Users - Edit permissions. This permission cannot be constrained. This is an administrator permission. Core Administration
Users - Edit Middle Name Grants ability to modify the middle name for a user via the admin/users screen. This permission only works when used in conjunction with the Users - View permission. This is an administrator permission. Core Administration
Users - Edit Mobile Phone Grants ability to modify the Mobile Phone number for a user via the Admin/Users screen. The availability of this permission is controlled by a backend setting. This permission only works when used in conjunction with the Users - View permission. Core Administration
Users - Edit Personal Email Address

Enables administrator to edit the Personal Email Address for a user via the admin/users screen. This permission cannot be constrained. This is an administrator permission. By default, this permission is included in the System Administrator security role and parent roles of System Administrator.

 Core Administration
Users - Edit Prefix Grants ability to modify the prefix for a user's name via the admin/users screen. This permission only works when used in conjunction with the Users - View permission. This is an administrator permission. Core Administration
Users - Edit Secure User Custom Fields - Unmasked Grants the ability to edit secure user custom field info unmasked. This permission can be constrained by OU, Restrict to User's OU, User Self and Subordinates, User, User's Self, User's Manager, User's Superiors, User's Subordinates, User's Direct Reports, Employee Relationship. This is an administrator permission. Core Administration
Users - Manage Secure User Custom Fields Grants the ability to manage the setting secure user custom fields. This permission can be restrained by OU, User's OU, User Self and Subordinates, User, User's Self, User's Manager, User's Superiors, User's Subordinates, User's Direct Reports, Employee Relationship. This is an administrator permission. Core Administration
Users - View Secure User Custom Fields - Masked Grants the ability to view secure user custom field info masked. This permission can be constrained by OU, User's OU, User Self and Subordinates, User, User's Self, User's Manager, User's Superiors, User's Subordinates, User's Direct Reports, Employee Relationship. This is an administrator permission. Core Administration
Users - Edit Sensitive Information: Unmasked Grants ability to view and edit unmasked Sensitive Personally Identifiable Information (SPII) fields on the user record. Administrators with this permission have the option to view and edit the actual data on the user record. This permission can be constrained by OU, User's OU, User's Self, User's Subordinates, User's Direct Subordinates, User, and Employee Relationship. This is an administrator permission. Core Administration
Users - Edit Signature Grants ability to modify the signature font for a user via the admin/users screen. This permission only works when used in conjunction with the Users - View permission. This is an administrator permission. Core Administration
Users - Edit Suffix Grants ability to modify the suffix for a user's name via the admin/users screen. This permission only works when used in conjunction with the Users - View permission. This is an administrator permission. Core Administration
Users - Edit User ID Enables administrator to modify the User ID for a user via the admin/users screen. This permission only works when used in conjunction with the Users - View permission. Core Administration
Users - Edit Users Absent Status Enables administrator to modify the Absent status for a user via the admin/users screen. This permission only works when used in conjunction with the Users - View permission. Core Administration
Users - Edit Users Active Status Enables administrator to modify the Active status for a user via the admin/users screen. This permission only works when used in conjunction with the Users - View permission. Core Administration
Users - Edit Users Address Enables administrator to modify the address for a user via the admin/users screen. This permission only works when used in conjunction with the Users - View permission. Core Administration
Users - Edit Users Approver Enables administrator to modify the specified Approver for a user via the admin/users screen. This permission only works when used in conjunction with the Users - View permission. Core Administration
Users - Edit Users Email Enables administrator to modify the Email Address for a user via the admin/users screen. This permission only works when used in conjunction with the Users - View permission. Core Administration
Users - Edit Users Fax Enables administrator to modify the Fax number for a user via the admin/users screen. This permission only works when used in conjunction with the Users - View permission. Core Administration
Users - Edit Users Language Enables administrator to modify the portal display language for a user via the admin/users screen. This permission only works when used in conjunction with the Users - View permission. Core Administration
Users - Edit Users Last Hire Date Enables administrator to modify the Last Hire Date for a user via the admin/users screen. This permission only works when used in conjunction with the Users - View permission. Core Administration
Users - Edit Users Manager Enables administrator to modify the assigned Manager for a user via the admin/users screen. This permission only works when used in conjunction with the Users - View permission. Core Administration
Users - Edit Users Original Hire Date Enables administrator to modify the Original Hire Date for a user via the admin/users screen. This permission only works when used in conjunction with the Users - View permission. Core Administration
Users - Edit Users Phone Enables administrator to modify the Phone number for a user via the admin/users screen. This permission only works when used in conjunction with the Users - View permission. Core Administration
Users - Edit Users Photo Enables administrator to upload a photo for a user via the admin/users screen. This permission only works when used in conjunction with the Users - View permission. Core Administration
Users - Edit Users Reconciliation Enables administrator to modify the Reconciliation status for a user via the admin/users screen. This permission only works when used in conjunction with the Users - View permission. Core Administration
Users - Edit Users Required Approvals Enables administrator to modify the number of required training approvals for a user via the admin/users screen. This permission only works when used in conjunction with the Users - View permission. Core Administration
Users - Edit Users Time Zone Enables administrator to modify the portal time zone for a user via the admin/users screen. This permission only works when used in conjunction with the Users - View permission. Core Administration
Users - Edit Users Type and Status Enables administrator to view and modify the type and status information for a user via the User Record. This permission only works when used in conjunction with the Users - View permission. Core Administration
Users – Effective Dating: Manage Enables administrator to make effective dated changes to the user record. This permission only works when used in conjunction with the Users - Edit General Information permission. This permission cannot be constrained. This is an administrator permission. Core Administration
Users - Manage OU Based Regex Grants access to manage OU-based Regex patterns for user custom fields. This permission cannot be restrained. This is an administrator permission. Core Administration
Users - Unlock Accounts Grants ability to unlock user accounts that are currently locked. This permission can be constrained by OU, User's OU, User's Subordinates, and User. This is an administrator permission. Core Administration
Users - View Approver Search Enables those who can search for and view users via the Admin/User screen to search by users' assigned approver. This permission only works when assigned in conjunction with the Users - View permission. Core Administration
Users - View Core and Edit Custom Fields

Grants ability to view core information on a user record, including first name, last name, username, assigned OUs, custom relationships, and custom fields. This permission also includes the ability to edit any custom fields that are visible to the administrator. This permission works in conjunction with the Users - View permission. This permission can be constrained by OU, User's OU, User Self and Subordinates, and User. This is an administrator permission.

Note: When the User Record Redesign is enabled in a portal, this permission is disabled. Administrators who previously had this permission are automatically assigned the following permissions:

  • Universal Profile - User Record - Edit Users
  • Universal Profile - User Record - View Users
  • Users - Edit Custom Field Information
  • Users - View Custom Field Information
  • Users - View General Information

This permission is obsolete following the retirement of the legacy User Record in the May '17 release.

 Core Administration
Users - View Criteria Search Enables those who can search for and view users via the Admin/User screen to search by OU and Group criteria. This permission only works when assigned in conjunction with the Users - View permission. Core Administration
Users – View Custom Field Information Grants ability to view the custom fields on a user record. Administrators are only able to view a custom field on a user's user record if the user is within their permission constraints and the administrator is within the availability of the custom field. This permission works in conjunction with the Users - View permission. This permission can be constrained by OU, User's OU, User's Self, User Self and Subordinates, and User. This is an administrator permission. Core Administration
Users – View General Information Grants ability to view the general fields on a user record, including first name, last name, username, assigned OUs, and custom relationships. This permission works in conjunction with the Universal Profile - User Record - View Users permission. This permission can be constrained by OU, User's OU, User's Self, User Self and Subordinates, and User. This is an administrator permission. Core Administration
Users - View Local System ID Enables administrator to view the Local System ID for a user via the admin/users screen. This permission only works when used in conjunction with the Users - View and Users - Edit permissions. This permission cannot be constrained. This is an administrator permission. Core Administration
Users - View Manager Search Enables those who can search for and view users via the Admin/User screen to search by users' assigned manager. This permission only works when assigned in conjunction with the Users - View permission. Core Administration
Users - View Middle Name Grants ability to view the middle name for a user via the Admin/Users screen. This permission only works when used in conjunction with the Universal Profile - User Record - View Users and Users - View General Information permissions. This is an administrator permission. Core Administration
Users - View Mobile Phone Grants ability to view the Mobile Phone number for a user via the Admin/Users screen. The availability of this permission is controlled by a backend setting. This permission only works when used in conjunction with the Users - View permission. Core Administration
Users - View Modification Details Grants ability to view the Modification Details on the User Record and view User Audits fields when creating a User custom report. This permission only works when used in conjunction with the Users - View permission. This is an administrator permission. Core Administration
Users - View Personal Email Address Enables administrator to view the Personal Email Address for a user via the admin/users screen. This permission cannot be constrained. This is an administrator permission. By default, this permission is included in the System Administrator security role and parent roles of System Administrator. Core Administration
Users - View Prefix Grants ability to view the prefix for a user's name via the Admin/User screen. This permission only works when used in conjunction with the Universal Profile - User Record - View Users and Users - View General Information permissions. This is an administrator permission. Core Administration
Users - View Sensitive Information: Masked Grants ability to view masked Sensitive Personally Identifiable Information (SPII) fields on the user record. Administrators with this permission cannot view the actual data. This permission can be constrained by OU, User's OU, User's Self, User's Subordinates, User's Direct Subordinates, User, and Employee Relationship. This is an administrator permission. Core Administration
Users - View Sensitive Information: Unmasked Grants ability to view unmasked Sensitive Personally Identifiable Information (SPII) fields on the user record. Administrators with this permission have the option to view the actual data on the user record. This permission can be constrained by OU, User's OU, User's Self, User's Subordinates, User's Direct Subordinates, User, and Employee Relationship. This is an administrator permission. Core Administration
Users - View Signature Grants ability to view the signature font for a user via the Admin/Users screen. This permission only works when used in conjunction with the Universal Profile - User Record - View Users permission. This is an administrator permission. Core Administration
Users - View Suffix Grants ability to view the suffix for a user's name via the Admin/Users screen. This permission only works when used in conjunction with the Universal Profile - User Record - View Users permission. Core Administration
Users - View User ID Enables administrator to view the User ID for a user via the Admin/Users screen. This permission only works when used in conjunction with the Universal Profile - User Record - View Users permission. Core Administration
Users - View Users Absent Status Enables administrator to view the Absent status for a user via the Admin/Users screen. This permission only works when used in conjunction with the Universal Profile - User Record - View Users permission. Core Administration
Users - View Users Active Status Enables administrator to view the Active status for a user via the Admin/Users screen. This permission only works when used in conjunction with the Universal Profile - User Record - View Users permission. Core Administration
Users - View Users Address Enables administrator to view the address for a user via the Admin/Users screen. This permission only works when used in conjunction with the Universal Profile - User Record - View Users permission. Core Administration
Users - View Users Approver Enables administrator to view the specified Approver for a user via the Admin/Users screen. This permission only works when used in conjunction with the Universal Profile - User Record - View Users permission. Core Administration
Users - View Users Email Enables administrator to view the Email Address for a user via the Admin/Users screen. This permission only works when used in conjunction with the Universal Profile - User Record - View Users permission. Core Administration
Users - View Users Fax Enables administrator to view the Fax number for a user via the Admin/Users screen. This permission only works when used in conjunction with the Universal Profile - User Record - View Users permission. Core Administration
Users - View Users Language Enables administrator to view the portal display language for a user via the Admin/Users screen. This permission only works when used in conjunction with the Universal Profile - User Record - View Users permission. Core Administration
Users - View Users Last Hire Date Enables administrator to view the Last Hire Date for a user via the Admin/Users screen. This permission only works when used in conjunction with the Universal Profile - User Record - View Users permission. Core Administration
Users - View Users Manager Enables administrator to view the assigned Manager for a user via the Admin/Users screen. This permission only works when used in conjunction with the Universal Profile - User Record - View Users permission. Core Administration
Users - View Users Original Hire Date Enables administrator to view the Original Hire Date for a user via the Admin/Users screen. This permission only works when used in conjunction with the Universal Profile - User Record - View Users permission. Core Administration
Users - View Users Phone Enables administrator to view the Phone number for a user via the Admin/Users screen. This permission only works when used in conjunction with the Universal Profile - User Record - View Users permission. Core Administration
Users - View Users Photo Enables administrator to view a photo for a user via the Admin/Users screen. This permission only works when used in conjunction with the Universal Profile - User Record - View Users permission. Core Administration
Users - View Users Reconciliation Enables administrator to view the Reconciliation status for a user via the Admin/Users screen. This permission only works when used in conjunction with the Universal Profile - User Record - View Users permission. Core Administration
Users - View Users Required Approvals Enables administrator to view the number of required training approvals for a user via the Admin/Users screen. This permission only works when used in conjunction with the Universal Profile - User Record - View Users permission. Core Administration
Users - View Users Time Zone Enables administrator to view the portal time zone for a user via the Admin/Users screen. This permission only works when used in conjunction with the Universal Profile - User Record - View Users permission. Core Administration
Users - View Users Type and Status Grants ability to view user type and status information on the User Record. This permission cannot be constrained. This permission only works when used in conjunction with the Users - View and Users - Edit permissions. Core Administration
Users - View Grants ability to search for and view summary information about users in the portal via the Admin/Users screen. This permission can be constrained by OU, User's OU, User Self and Subordinates, and Users. If multiple constraints are added, these constraints are considered OR statements. This is an administrator permission. Core Administration
Welcome Page - View Grants access to view Welcome Page. This permission cannot be constrained. This is an end user permission. Core
Welcome Page Preferences - Manage Grants ability to configure the look and feel of the Welcome Page that users see upon logging in to the portal. This permission can be constrained by OU and User's OU. This is an administrator permission. Core Administration
Work Force Planning - Administrator Grants access to the Headcount Planning page. Users with this permission can also create new headcount plans for any part of the organization, as well as create subplans that have been assigned to them. Administrators can only view plans that they have created or to which they were assigned as a Co-Planner or Primary Planner. This is an administrator permission. Core Administration
Work Force Planning - Cost Model Manager

Allows user to upload and manage costing files and exchange rates for Planning.

 Core Administration
Work Force Planning - Owner Grants owner-level access to plans. Users with this permission can view their assigned plans and can create plans. This permission cannot be constrained. Core Administration
Work Force Planning - Reporting Analyst Grants reporting analyst-level access to plans. Users with this permission cannot create plans or edit plan metadata. This permission cannot be constrained. Core Administration
Work Force Planning - Subplanner Grants the ability to complete subplans that have been assigned to the user as a Primary Planner or a Co-Planner. Users with this permission cannot create new headcount plans or view all plans. Within the plans assigned to them, users can assign subplans to their direct reports. Core Administration
Writing Tools - Manage Grants ability to activate or deactivate spell checker and inappropriate language filter by module, and create/manage categories for Comment Assistant used in performance tasks. This is an administrator permission. Core Administration
PERMISSION NAME PERMISSION DESCRIPTION CATEGORY
Billing Entity - Manage Grants ability to add and edit the Billing Entity value for any learning object. This permission can be constrained by OU and User's OU. eCommerce
Billing Information Preferences Grants ability to manage which payment options are available to users. Administrators can determine which payment options are available and how the options appear during the configuration process and purchasing process. This permission cannot be constrained. This is an administrator permission. eCommerce - Administration
Client Account OU - Manage Allows administrations to view, create, and edit Client Account organizational units (OU) and manage the Manage Client Accounts page. This is an administrator permission. eCommerce - Administration
Client Account OU - View Allows administrations to view Client Account organizational units. This permission can be constrained by OU. This is an administrator permission. eCommerce - Administration
Coupon Admin - Manage Provides manage access to Coupon Administration screen, enabling admins to view, add, delete and edit coupons. This permission can be constrained by Provider, ILT Provider, OU, User's OU, and User's LO Availability. This is an administrator permission. eCommerce - Administration
Coupon Admin - View Provides view only access to Coupon Administration screen, enabling user to view details of existing coupons, but not add, edit or delete coupons. This permission can be constrained by Provider, ILT Provider, OU, User's OU, and User's LO Availability. This is an administrator permission. eCommerce - Administration
Coupon Preferences - Manage Grants ability to access and manage Coupon Preferences, where administrators can create and edit pre-defined discount amounts. This permission cannot be constrained. This is an administrator permission. eCommerce - Administration
Course Reviews and Ratings - Manage Grants ability to delete other users' reviews/ratings. This is an administrator permission. eCommerce - Administration
Course Reviews and Ratings Preference - Manage Grants ability to configure course reviews and ratings functionality by division. This is an administrator permission. eCommerce - Administration
Inventory - Manage Grants ability to purchase multiple learning object licenses with the intent to assign that training to other users at a later time. This permission can be constrained by OU and User's OU. eCommerce
Inventory - Update Allows the user to adjust inventory purchases to reduce the total amount of purchased inventory. This is an administrator permission and cannot be constrained. eCommerce
Inventory - View All Allows the user to view all inventory purchases for the entire organization on the Inventory Management page, regardless of who purchased the inventory . eCommerce
Invoice Preferences - Admin Grants access to Invoice Preferences. This page enables administrators to customize the invoices that users receive. Administrators can create invoices for users in order to meet certain requirements, such as the requirements of a different country. This permission cannot be constrained. This is an administrator permission. eCommerce - Administration
My Account Orders - View Grants ability to view the Orders page in My Account. This permission cannot be constrained. This is an end user permission. eCommerce
Order History Details - Edit Grants ability to edit the Order History Details page of My Account, which displays all of the details for orders, including transaction date, transaction ID, payment method, reference number, order status, secondary address, and the details of each item purchased. Users with this permission can edit their own transaction information. This permission can be constrained by User's OU. This is an end user permission. eCommerce
Order History Details - View Grants access to Order History Details page of My Account, which displays all of the details for orders, including transaction date, transaction ID, payment method, reference number, order status, and the details of each item purchased. This permission cannot be constrained. This is an end user permission. eCommerce
Payment Account - Modify Grants ability to create payment profiles to determine the routing of users' payments. This permission cannot be constrained. This is an administrator permission. eCommerce - Administration
Price Adjust - Manage Grants ability to define a custom price for a user in purchase by proxy. This permission can be constrained by OU and User's OU. This is an administrator permission. eCommerce - Administration
Proxy Checkout Grants ability to purchase learning objects on behalf of other users. This permission can be constrained by OU and User's OU. The permission constraints determine the users for which the administrator can purchase learning objects. This is an administrator permission. eCommerce - Administration
Refund Training Grants ability to issue a refund for a training item while removing it from the user's transcript. This is an administrator permission. eCommerce - Administration
Shopping Cart Preferences - Manage Grants ability to configure shopping cart preferences, which allows the administrator configure aspects of the shopping cart page to be viewed by users making shopping cart purchases. This permission can be constrained by OU and User's OU. This is an administrator permission. eCommerce - Administration
Subscription - Manage Allows administrations to view, create, and edit Subscriptions and manage the Manage Subscriptions page. This is an administrator permission. eCommerce - Administration
Subscription OU - View Allows administrations to view Subscription organizational units. This permission can be constrained by OU. This is an administrator permission. eCommerce - Administration
Tax Exemption - Manage Grants ability to manage Tax Exemption and Exemption Certificate on a user record. eCommerce
Tax Exemption - User Edit Grants ability to edit Tax Exemption and Exemption Certificate for users on their Payment Methods in My Account. This permission cannot be constrained. eCommerce
Tax Exemption - View Grants ability to view Tax Exemption and Exemption Certificate for users on their Payment Methods in My Account. This permission cannot be constrained. eCommerce
Tax Override - Manage Grants ability to add and edit the Override value for users in the E-Commerce Information section of the User Record page. This permission cannot be constrained. This is an administrator permission. This permission only works when used in conjunction with the Users - View permission. eCommerce
Tax Override - View Grants ability to view the Override value for users on their Payment Methods in My Account. This permission cannot be constrained. eCommerce
Training Unit Assignment - View Grants ability to view assignments of training units without being able to add or edit assignments. This permission can be constrained by OU and User's OU. This is an administrator permission. eCommerce - Administration
Training Unit Assignment Grants ability to assign a block of training units to an org unit or group and to edit training units once they have been created. This permission can be constrained by OU and User's OU. This is an administrator permission. eCommerce - Administration
Training Unit Distribution Dynamically assigned permission which a user receives when designated as a “distributor” of one or more training unit assignments. With this permission the distributor is able to allocate training units to specific users within the target population of the training unit assignment. eCommerce
Training Unit Preferences Grants ability to configure certain aspects or behaviors of training units at the organizational or division level. This permission can be constrained by OU and User's OU. This is an administrator permission. eCommerce - Administration
Training Unit Revocation - Manage Grants ability to revoke a user's training units granted, via the user administration page. This is an administrator permission. eCommerce - Administration
Transaction Manager - Manage Grants ability to access the Manage Transaction page and also create and edit transactions. On the Order History Details page, the administrator can edit the order status, adjust prices, issue refunds, or enter comments. This permission can be constrained by User's OU. This is an administrator permission. eCommerce - Administration
Transaction Manager - View Grants ability to view the Manage Transaction page where the administrator can review the transactions that meet their permission constraints. This permission can be constrained by User's OU. This is an administrator permission. eCommerce - Administration
User Payment Preferences - Manage Grants ability to manage user payment preferences, which includes determining the payment methods allowed and percentage of overall price that users must pay when purchasing learning content. This permission can be constrained by OU and User's OU. This is an administrator permission. eCommerce - Administration
VAT Number - Manage Grants ability to add and edit the VAT number for users in the E-Commerce Information section of the User Record page. This permission cannot be constrained. This is an administrator permission. This permission only works when used in conjunction with the Users - View permission. eCommerce - Administration
VAT Number - User Edit Grants ability to add and edit the VAT number for users on their Payment Methods in My Account. This permission cannot be constrained. eCommerce
VAT Number - View Grants ability to view the VAT number for users on their Payment Methods in My Account. This permission cannot be constrained. eCommerce
PERMISSION NAME PERMISSION DESCRIPTION CATEGORY
My Account Devices - Manage Grants ability to access the Devices tab of My Account. The Devices tab enables users to register their mobile devices with the Cornerstone application. This permission cannot be constrained. This is an end user permission. Mobile
Mobile Preferences Grants ability to manage Mobile Preferences. This permission cannot be constrained. Mobile
Offline Content Administration Grants ability to access and manage the Offline Preferences page. This permission also enables the administrator to select which learning objects are available for use with the new Offline Player via the Course Catalog. This permission cannot be constrained. This is an administrator permission. Mobile
Offline Content Grants ability to download and complete training items offline via a mobile device or the new Offline Player. This permission cannot be constrained. This is an end user permission. Mobile
PERMISSION NAME PERMISSION DESCRIPTION CATEGORY
Activate Exempt Reason Preferences Grants ability to choose which exempt training reasons will be available to choose when requesting exemption from training or when administrator marks a user exempt from completing a learning object. This is an administrator permission. Learning - Administration
Activate Session Cancellation Reasons Preferences Grants ability to activate Session Cancellation Reasons by organizational unit. When activated, these reasons are available to administrators when canceling a session. This permission can be constrained by OU and User's OU. This is an administrator permission. Learning - Administration
Activate Session Withdrawal Reasons Preferences Grants ability to activate Session Withdrawal Reasons by organizational unit. When activated, these reasons are available to users when withdrawing from a session and to administrators when withdrawing a user from a session. This permission can be constrained by OU and User's OU. This is an administrator permission. Learning - Administration
Activate Training Removal Reasons Preferences Grants ability to activate Training Removal Reasons by organizational unit. When activated, these reasons are available to administrators when removing training from a transcript. Learning - Administration
Admin Search Preferences - Manage Grants ability to configure preferences for Global Search and Course Catalog within Search Preferences. The constraints of this permission are inherited from the Global Search Preferences - Manage permission. This is an administrator permission. Learning - Administration
Approval Template Administration - Manage Grants ability to manage approval templates that can be applied to learning objects. Defaults must be overridden at the learning object level by those who create and manage them. This permission can be constrained by OU, User's OU, and Training Type. This is an administrator permission. Learning - Administration
Approval Template Administration - View Grants ability to view approval templates that can be applied to learning objects. Defaults must be overridden at the learning object level by those who create and manage them. This permission can be constrained by OU, User's OU, and Training Type. This is an administrator permission. Learning - Administration
Approve Exemption Request Grants ability to view and respond to pending training exemption requests via the Welcome Page Inbox widget. This is an administrator permission. Learning - Administration
Approve Training by Approver Grants ability to approve training requests of those for whom the user is the designated approver. Learning
Approve Training by Cost Center Approver Grants ability to approve training requests of those for whom the user is the designated cost center approver. Learning
Approve Training by Manager Grants ability to approve training requests of those for whom the user is the designated manager. Learning
Asset Administrator Grants access to the Asset Administrator, which enables uploading and updating of all image, video and audio files for use in online courses. Also requires assignment of LCMS license. This is an administrator permission. Learning - Administration
Assign Training Grants ability to assign learning objects to the transcripts of those for whom the user is the assigned manager, approver or cost center approver. This is a manager/approver permission. Learning
Assignment Tool - Restrict to Users' LO Availability Causes administrators to be constrained by User's LO Availability. If this permission is constrained, then the user creating the Proxy Enrollment/Assignment can only select training that is within the users own availability. This is an administrator permission. Learning - Administration
Assignment Tool - Bypass User Payment Grants ability to bypass user payment when creating a Learning Assignment. When user payment is bypassed, users are automatically registered into the training regardless of whether or not payment is required. This permission is dependent on the Assignment Tool - Standard, Assignment Tool - Standard and Dynamic, and Assignment Tool - Standard and Dynamic - Recurrence permissions. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Assignment Tool - Dynamic Reassignment Grants ability to enable/disable Dynamic Re-assignment for an assignment after submission. When Dynamic Re-assignment is enabled, users that meet the User Criteria again (after previously being dynamically removed) are re-assigned. This permission is dependent on the Assignment - Standard, Dynamic - Standard and Dynamic, and Dynamic Assignment - Standard and Dynamic - Recurrence permissions. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Assignment Tool - Dynamic Removal

Grants ability to enable/disable Dynamic Removal from within the Learning Assignment create workflow and/or the Assignment Summary page. When Dynamic Removal is enabled, users that no longer meet the User Criteria are removed from the Learning Assignment. This permission is dependent on the Assignment Tool - Standard, Assignment Tool - Standard and Dynamic and Assignment Tool - Standard and Dynamic - Recurrence permissions. This permission cannot be constrained. This is an administrator permission.

 Learning - Administration
Assignment Tool - Email Settings - Manage Grants ability to manage email settings when creating a Learning Assignment. This includes the ability to select all four email settings, set up Custom Emails (create new emails and set existing emails as active/inactive), set up Ad-Hoc Emails, and enable/disable Assign Training and Register Training email triggers when Training Specific Emails is selected. This permission is dependent on the Assignment Tool - Standard, Assignment Tool - Standard and Dynamic, and Assignment Tool - Standard and Dynamic - Recurrence permissions. This permission can be constrained by OU, User, User Self and Subordinates, and User's OU. If this permission is constrained, then only users within the constraints will receive the emails. This is an administrator permission. Learning - Administration
Assignment Tool - Email Settings - View Grants ability to view and select email settings when creating a Learning Assignment. This includes the ability to select Training Specific Emails, Custom Emails, or No Emails but does not grant ability to manage the actual Email Settings (cannot configure Custom Emails or Ad-Hoc Email and cannot enable/disable Assign Training and Register Training email triggers when Training Specific Emails is selected). This permission is dependent on the Assignment Tool - Standard, Assignment Tool - Standard and Dynamic, and Assignment Tool - Standard and Dynamic - Recurrence permissions. This permission can be constrained by OU, User, User Self and Subordinates, and User's OU. If this permission is constrained, then only users within the constraints will receive the emails. This is an administrator permission. Learning - Administration
Assignment Tool - Force Removal Grants ability to force the removal of training assigned by a standard or dynamic learning assignment on the Assignment Summary page. This is an administrator permission. This permission can be constrained by OU and Users, and the user can be limited to only being able to use this functionality for assignments they created. Learning - Administration
Assignment Tool - Restrict to Users' LO Availability This permission does not grant ability to any specific functionality and can only be constrained by Users' LO Availability. If this permission is constrained, then the user creating the Learning Assignment can only select and assign training that is within the users own availability. This permission is dependent on the Assignment Tool - Standard, Assignment Tool - Standard and Dynamic, and Assignment Tool - Standard and Dynamic - Recurrence permissions. This is an administrator permission. Learning - Administration
Assignment Tool - Standard

Grants ability to create Standard (one-time) Learning Assignments to directly assign training to users. This permission can be constrained by OU, Provider, Training Item, Training Type, User, User Self and Subordinates, and User's OU. If this permission is constrained by Location, Provider, Training Type, or Training Item, then they can only assign training within the constraints. If this permission is constrained by OU, User, User Self and Subordinates, or User's OU, then they can only assign to and view assignments created by users within the constraints. This is an administrator permission.

 Learning - Administration
Assignment Tool - Standard and Dynamic

Grants ability to create Standard (one-time) and Dynamic (continuous) Learning Assignments to directly assign training to users. This permission can be constrained by OU, Provider, Training Item, Training Type, User, User Self and Subordinates, and User's OU. If this permission is constrained by Location, Provider, Training Type, or Training Item, then they can only assign training within the constraints. If this permission is constrained by OU, User, User Self and Subordinates, or User's OU, then they can only assign to and view assignments created by users within the constraints. This is an administrator permission.

 Learning - Administration
Assignment Tool - Standard and Dynamic - Recurrence

Grants ability to create Standard (one-time) and Dynamic (continuous) Learning Assignments to directly assign training to users. Also grants ability to enable/disable Recurrence when creating a Dynamic Learning Assignment. This permission can be constrained by OU, Provider, Training Item, Training Type, User, User Self and Subordinates, and User's OU. If this permission is constrained by Location, Provider, Training Type, or Training Item, then they can only assign training within the constraints. If this permission is constrained by OU, User, User Self and Subordinates, or User's OU, then they can only assign to and view assignments created by users within the constraints. This is an administrator permission.

 Learning - Administration
Assignment Tool - Training Start Date

Grants ability to configure a Training Start Date when creating a Standard Learning Assignment. The Training Start Date is the date that users will be able to start the training. This permission is dependent on the Assignment Tool - Standard, Assignment Tool - Standard and Dynamic, and Assignment Tool - Standard and Dynamic - Recurrence permissions. This permission cannot be constrained. This is an administrator permission.

 Learning - Administration
Assignment Tool Preferences Grants access to Assignment Tool Preferences where an administrator can activate the new Assignment Tool and configure the processing options and settings to create Learning Assignments. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Attachments in Transcript - Manage Grants ability to upload new attachments and delete existing attachments for LOs on a user's transcript. Users with this permission are automatically granted permission to view attachments. This permission can be constrained by OU, User's OU, User Self and Subordinates, User, User's self, User's ILT Provider, ILT Provider, and Instructor. Learning Administration
Attachments in Transcript - View Grants ability to view attachments that have been uploaded for LOs on a user's transcript. This permission can be constrained by OU, User's OU, User Self and Subordinates, User, User's self, User's ILT Provider, ILT Provider, and Instructor. Learning
Browse for Training Preferences - Manage Grants ability to configure the Browse for Training features, including which subjects appear in the Browse for Training widget. This permission can be constrained by OU and User's OU. This is an administrator permission. Learning - Administration
Browse For Training Grants access to the Browse For Training Page. This is an end user permission. Learning
Bulk Training Removal - Manage

Grants ability to bulk remove training from users’ transcripts. This permission can be constrained by OU and User's OU. Creator constraints also apply. This is an administrator permission.

 Learning - Administration
Certification - Categories Admin Grants administrators ability to manage certification categories. This is an administrator permission. Learning - Administration
Certification - Enroll Certified Grants administrator ability to enroll certified users into a certification. This is an administrator permission. Learning - Administration
Certification - Family Admin Grants administrators ability to manage certification families. This is an administrator permission. Learning - Administration
Certification - Manage Grants administrators ability to manage certifications. This permission can be constrained by OU and User's OU. This is an administrator permission. Learning - Administration
Certification - Owner Grants user ability to act as the certification owner, which enables them to view and approve requests for the certification, manage users in the certification, and edit the due date/expiration date for users in the certification. This permission can be constrained by OU and User's OU. This is an administrator permission. Learning - Administration
Certification - Update Credit Grants administrator ability to update the number of acquired credits on a user's certification progress report page. This also enables administrators or users to "certify" users by adjusting the number of credits received. This is an administrator permission. Learning - Administration
Certification - User View Grants users ability to view their certifications via the transcript screen and also alters the look and feel of the transcript screen, displaying user photo and navigation bar to toggle between learning transcript and certifications. This permission can be constrained by OU and User's OU. This is an end user permission. Learning
Citrix Portal Preferences - GotoMeeting - Manage Grants ability to manage GotoMeeting Preferences within Citrix Portal Preferences. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Cohort Roster - Email Registered Users Grants ability to send a custom email message to all students listed on the roster for a cohort. An additional link appears on the Cohort Roster page for sending such messages. This is an administrator permission. Learning - Administration
Cohort Roster - Manage Grants ability to manage cohort rosters. A variety of other features are available depending upon additional roster permissions. This permission works in conjunction with Cohorts - Manage or Cohorts - Edit permissions and the Cohort Roster - View permission. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Cohort Roster - View Grants view-only access to cohort rosters. This permission works in conjunction with the Cohorts - Manage or Cohorts - Edit permissions. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Configure External Training Grants ability to configure external training preferences at global/OU level. This is an administrator permission. Learning - Administration
Content Launching Preference - Manage Grants ability to configure Content Launching Preferences which defines how online course content launches on users' desktops. These preferences allow administrators to delineate the data encryption associated with the course launch and how the system is to react to plug-ins (e.g., Shockwave). This permission can be constrained by OU, User's OU, or User's Corporation. This is an administrator permission. Learning - Administration
Content Licenses - Manage Grants ability to assign or remove available LCMS licenses to/from users. When a content license is assigned, the user is able to create and/or publish online courses (if they also have appropriate LCMS permissions assigned). This is an administrator permission. Learning - Administration
Content Request Preferences - Manage Grants ability to set learning Content Requesting Preferences, which enables administrators to configure whether a manager or approver can assign a training item to their subordinates even if their subordinates are not within the training item's availability. This permission can be constrained by OU and User's OU. This is an administrator permission. Learning - Administration
Course Catalog - Manage Screen Resolution Grants ability to manage screen resolution for courses at the learning object level, via the course catalog. This permission works in conjunction with the Course Catalog - Update permission. This is an administrator permission. Learning - Administration
Course Catalog - Update

Grants ability to manage and edit training items listed in the Course Catalog and also grants access to the Course Console, where training can also be managed and edited. This permission also grants access to the Popular Requests and Highest Rated widgets on the Learning Admin Console (in conjunction with the Learning Admin Console - View permission). This permission also allows administrators to reversion online courses via the Course Console page. This permission also allows administrators to access an Edit Training option for training items included as objectives in Development plans.

This permission can be constrained by OU, User's OU, Training Type, Training Item, Provider, ILT Provider, User's ILT Provider, User, User Self and Subordinates, and User's LO Availability. This is an administrator permission.

Note: Adding an OU constraint and a provider constraint to this permission results in an "AND" statement.

Learning - Administration
Course Catalog - View

Grants access to view the learning objects in the course catalog and enables administrators to view the Course Console and the Popular Requests and Highest Rated widgets on the Learning Admin Console (in conjunction with the Learning Admin Console - View permission). This permission can be constrained by OU, User's OU, Training Type, Training Item, Provider, ILT Provider, User's ILT Provider, and User's LO Availability. This is an administrator permission.

Adding an OU constraint and a provider constraint to this permission results in an "AND" statement.

 Learning - Administration
Course Code -Edit Grants ability to edit Training Course Codes. This is an administrator permission. Learning - Administration
Course Code - Manage Grants ability to access and manage the Course Code Preferences. This is an administrator permission. Learning - Administration
Course Code - View Grants ability to view Training Course Codes. This is an administrator permission. Learning - Administration
Course Publisher

Grants access to LCMS Course Publisher, which enables upload and publishing of SCORM and AICC compliant online courses, created either in the LCMS Course Builder, or from a third party course building tool. Administrators must also be granted a content license from the Manage Licenses page. This is an administrator permission.

With the Oct '17 release, after Content Publisher is activated in the system, users with this permission are automatically granted the permissions to upload and publish online classes via the Content Publisher, and also the permission to view the Upload History page.

 Learning - Administration
Course Publisher Update

Grants ability to update existing online training courses previously published via the course publisher. Administrators must also be granted a content license from the Manage Licenses page. This is an administrator permission.

With the Oct '17 release, after the Content Publisher is activated in the system, users with this permission are automatically granted the permission to modify online classes.

 Learning - Administration
Currency Conversion Rate Preferences Grant Access to Conversion Rate Preferences, which enables setting currency conversion rates for all currencies supported in the portal. The combination of each column places settings that will be applied to the system where pricing and transactions are involved. This is an administrator permission. Learning - Administration
Currency Preferences - Manage Grants access to Currency Preferences screen and Currency Conversion Rates screen for purposes of billing for learning objects. This permission works in conjunction with the User Payment Preferences permission. This is an administrator permission. Learning - Administration
Curricula Admin - Manage

Grants ability to create new and edit/update existing curricula. This permission can be constrained by OU, User's OU, Provider, and User's LO Availability. This is an administrator permission.

Adding an OU constraint and a provider constraint to this permission results in an "AND" statement.

Tip: Do not constrain this permission to your entire corporation; it can cause long page load times and timeout errors. Applying this constraint is functionally the same as leaving the permission unconstrained, but omitting this constraint does not cause the system to do the unnecessary constraint checks as in the former scenario.

Learning - Administration
Curricula Preferences Grants ability to configure Curricula Preferences, which grants the ability to allow or disallow the same learning object (LO) from being added to multiple recurring curricula. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Curricula Version - Manage The constraints on this permission determine for which users the administrator can assign a new version of a curriculum when reversioning the curriculum. This permission works in conjunction with the Curricula Admin - Manage permission. The constraints on this permission determine for which users the administrator can assign a new version of a curriculum when reversioning a material that is contained within a curriculum. This permission can be constrained by OU, User's OU, and User. This is an administrator permission. Learning - Administration
Curriculum Admin - View

Grants view only access to curriculum details via Curriculum Administration screen. Does not include ability to view details of users enrolled in curricula. This permission can be constrained by Provider, OU, User's OU, and User's LO Availability.

Adding an OU constraint and a provider constraint to this permission results in an "AND" statement.

Tip: Do not constrain this permission to your entire corporation; it can cause long page load times and timeout errors. Applying this constraint is functionally the same as leaving the permission unconstrained, but omitting this constraint does not cause the system to do the unnecessary constraint checks as in the former scenario.

Learning - Administration
Curriculum Owner Grants ability for those designated as owner of one or more existing curricula to make edits/updates to those curricula. This is an administrator permission. Learning - Administration
Curriculum Player Options Grants ability to enable Curriculum Player feature via the General step when creating or editing a curriculum. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Curriculum Worksheet Manager Grants ability to manage curriculum worksheets and modify users' curriculum requirements. This is an administrator permission. Learning - Administration
Custom Certificate Management Grants ability to create custom certificates of completion for training. This permission can be constrained by OU and user's OU. This is an administrator permission. Learning - Administration
Default Approval Requirements by Training Type Grants ability to set Default Approval Requirements by Training Type that apply when users request training. Defaults may be overridden at learning object level by those who create and manage the learning objects. This is an administrator permission. Learning - Administration
Default Training Completion Signature Preferences Grants ability to manage Default Training Completion Signature preferences at the portal level. This enables the administrator to set the default setting for whether an electronic training completion signature is required. This permission can be constrained by OU and User's OU. This is an administrator permission. Learning - Administration
Default Training Image Preferences Grants access to Default Training Image Preferences page where an administrator can configure custom default images for training by type. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Display all Training Custom Fields Enables display of all training custom field values including blank fields when viewing details of training on transcript. Without this permission, the custom field will only appear if it is populated with a value. This is an end user permission. Learning
Edit Online Course Providers

Grants ability to edit the Provider field for an online course via the Course Catalog and Course Console. User must also have permission to view the Course Catalog. This permission cannot be constrained. This is an administrator permission.

 Learning - Administration
Edit Transcript Items Grants ability to modify training statuses and scores on other user's transcripts (training records) when viewing training details for particular learning objects on the transcript. User must also have permission to add external training in order to add or edit another user's external training. This permission can be constrained by OU, User's OU, User Self and Subordinates, User, and User's Self. Learning - Administration
Emails by Learning Object - Manage Grants access to create, edit and delete custom email templates/triggers at the learning object level. When viewing Course Console, this permission also grants ability to view and manage email triggers at the LO level. This permission works in conjunction with the Course Catalog - Update and Course Catalog - View permissions. This permission can be constrained by OU, User's OU, User's Self and Subordinates, and User. This is an administrator permission. Learning - Administration
Emails by Learning Object - View Grants access to view custom email triggers at the learning object level. When viewing Course Console, this permission also grants ability to view email triggers at the LO level. This permission works in conjunction with the Course Catalog - Update and Course Catalog - View permissions. This permission can be constrained by OU, User's OU, User's Self and Subordinates, and User. This is an administrator permission. Learning - Administration
Enable Curricula Auto-Launch Option Grants ability to enable the curricula auto-launch feature via the Structure step when creating or editing a curriculum. This is an administrator permission. Learning - Administration
Equipment Requests - Manage Grants ability to approve or deny requests for use of Resources for instructor led training sessions. User must also be designated as resource owner to approve the request. Learning - Administration
Evaluation Defaults - Modify Allows admin to define the default level 1, level 2 and level 3 evaluations. Learning - Administration
Evaluation Preferences - Manage Grants ability to manage Evaluation Preferences, which includes configuring options for each evaluation level and defining the default Likert scale used for evaluation questions. This is an administrator permission. Learning - Administration
Events - Create Grants ability to create new instructor led training events. This permission works in conjunction with Events - View permission. This permission can be constrained by OU, User's OU, ILT Provider, and User's ILT Provider. This is an administrator permission. Learning - Administration
Events - Edit Grants ability to edit/update existing instructor led training events. This permission works in conjunction with Events - View permission. This permission can be constrained by OU, User's OU, ILT Provider, and User's ILT Provider. This is an administrator permission. Learning - Administration
Events - View Grants view-only access to instructor led training events, enabling the user to view all details/options that were selected when the event was created. This permission can be constrained by OU, User's OU, User's ILT Provider, and ILT Provider. This is an administrator permission. Learning - Administration
Events Calendar

Grants access to view Events Calendar page. This permission also makes the Event Calendar button on the Learning Search page visible. This is an end user permission.

 Learning
Exceptions - Manage Grants ability to approve or deny Instructor Led Training Exception requests (e.g. availability exceptions, pre-requisite exceptions). This permission works in conjunction with the Event - View and Exceptions - View permissions. This is an administrator permission. Learning - Administration
Exceptions - View Grants view-only access to instructor led training exception requests, via the ILT Events and Session screen. This permission works in conjunction with the Events - View permission. This is an administrator permission. Learning - Administration
Exempt Reason Preferences Grants ability to create and edit/update bank of Training Exempt Reasons that can be used across the portal. This permission can be constrained by OU and User's OU. This is an administrator permission. Learning - Administration
Express Class - Create Material This permission controls whether a user can create a material training item via Express Class. This permission cannot be constrained. Materials created via Express Class will be visible within Material Administration and Course Catalog, but by default, end users cannot search for them. To make materials created via Express Class searchable, the administrator can set availability for the material within the Course Catalog after the new material has been created. Learning - Administration
Express Class - CSV Upload This permission grants the ability to upload CSV files for attendees included in an Express Class. This permission can be constrained by OU, User, User Self and Subordinates, and User's OU. This is an end user permission. Learning - Administration
Express Class - Manage Grants the ability to create and add users to an Express Class for a facilitated training session. This permission can be constrained by OU, User, User Self and Subordinates, and User's OU. This is an end user permission. Learning - Administration
Express Class Preferences Grants ability access the Express Class Preferences page, which allows administrators to set a default provider for material training items created through Express Class. Learning - Administration
Express Class - View Training

Grants ability to select training via Express Class. This permission can be constrained by any of the following criteria, but keep in mind that adding an OU constraint and a training-related constraint to this permission results in an "AND" statement:

  • User's ILT Provider
  • User's Self
  • User's LO Availability
  • User's Subordinates
  • User's Corporation
  • User's Division
  • User's Position
  • User's Grade
  • User's Cost Center
  • User's Location
  • User's Group
  • User's Self Registration Group
  • Provider
  • Training Type
  • ILT Provider
  • User
  • Training Item
  • Division
  • Position
  • Grade
  • Cost Center
  • Location
  • Group
  • Self Registration Group
 Learning - Administration
External Training - Add Grants a user the ability to add or edit their own external training. When viewing another user's transcript, the user must also have permission to edit transcript items in order to add or edit the user's external training. This permission cannot be constrained. This is an end user permission. Learning
Facilities - Create Grants ability to create new facilities (locations) via ILT/Facilities and Resources. This is an administrator permission. Learning - Administration
Facilities - Update Grants ability to edit/modify existing facilities (locations) via ILT/Facilities and Resources. This is an administrator permission. Learning - Administration
Facilities - View Grants view-only access to existing facilities (locations) and their details, from the ILT Facilities and Resources screen. This is an administrator permission. Learning - Administration
Facility Requests - Manage Grants ability to approve or deny Facility Requests for instructor led training sessions. ILT sessions remain in a "pending" status until the facility (location) owner approves use of the facility for the session, when approval is required. User must also be designated "owner" of the facility (location). This permission works in conjunction with Facilities - View permission. This is an administrator permission. Learning - Administration
Facility Requests - Update Grants ability to approve or deny requests of Facilities for instructor led training sessions. User must also be designated as facility owner to approve the request. Learning - Administration
Facility Requests - View Grants view-only access to instructor led training session Facility Requests. This is an administrator permission. Learning - Administration
Global Search – Certifications Grants ability to search for certifications via Global Search. This permission cannot be constrained. This is an end user permission. The availability of this permission is controlled by a backend setting. Learning
Global Search - Training Grants ability to search for training via Global Search. This permission also grants users the ability to view Subjects in Learner Home. If this permission is constrained to a specific OU, then that constraint is automatically applied within Global Search, including search filters and search results. This is an end user permission. The availability of this permission is controlled by a backend setting. Learning
ILT Evaluations - Print Grants ability to print evaluations at the session level for any session within the permission constraints. This permission can be constrained by Instructor, ILT Provider, User's ILT Provider, and User as Instructor. This is an administrator permission. Learning - Administration
ILT Evaluations - Update Grants ability to configure training evaluation settings at instructor led training event or session level, including choosing which evaluation template to use, and indicating whether an evaluation is active and required for the event or session. This is an administrator permission. Learning - Administration
ILT Evaluations - View Grants ability to view evaluation questions and user responses to those questions for evaluations associated with instructor led training events and sessions. This permission works in conjunction with Events - View permission. This is an administrator permission. Learning - Administration
ILT Preferences - Manage Grants ability to configure a variety of default settings that apply to new instructor led training events and sessions. This permission can be constrained by OU and User's OU. This is an administrator permission. Learning - Administration
ILT Schedule Part Occurrence Allows the admin to create more than one ILT session schedule part at the same time using a part occurrence schedule wizard. This is an administrator permission. Learning - Administration
ILT Vendors - Create Grants ability to create new training Vendors (Providers). This permission works in conjunction with the Vendors - View permission. This is an administrator permission. Learning - Administration
ILT Vendors - Update Grants ability to edit/update existing training Vendors (Providers). This permission works in conjunction with the Vendors - View permission. This is an administrator permission. Learning - Administration
ILT Vendors - View Grants view only access to instructor led training vendors (providers), via the ILT Vendors and Instructors screen. This is an administrator permission. Learning - Administration
ILT - Batch Create Sessions Allows the admin to create more than one ILT session at the same time using a session schedule wizard. This is an administrator permission. Learning - Administration
Import Assets Grants ability to Import Assets, which enables uploading updating of image, video and audio files for use in online courses. Can view and update assets imported by others if those assets are designated as editable by anyone. Also requires assignment of LCMS license. This is an administrator permission. Learning - Administration
Instructor Requests - Manage Grants ability to approve or deny instructor requests for ILT sessions. This permission works in conjunction with the Vendors - View, and Instructor Requests - View permissions. This is an administrator permission. Learning - Administration
Instructor Requests - View Grants view-only access to instructor led training session Instructor Requests, via the ILT Vendors and Instructors screen. This permission works in conjunction with the Vendors - View permission. This is an administrator permission. Learning - Administration
Instructors - Create Grants the ability to add new instructors for Instructor Led Training Vendors. This permission works in conjunction with the Vendors - View, and Instructors - View permissions. This is an administrator permission. Learning - Administration
Instructors - Update Grants ability to edit/update existing instructors for Instructor Led Training Vendors. This permission works in conjunction with the Vendors - View, and Instructors - View permissions. This is an administrator permission. Learning - Administration
Instructors - View VILT Details Allows user to see host ID and password for VILT site. This is an administrator permission. Learning - Administration
Instructors - View Grants view-only access to ILT instructors via the ILT Vendors and Instructors screen. This permission works in conjunction with Vendors - View permission. This is an administrator permission. Learning - Administration
Interest Tracking - Manage Grants ability to manage Interest Lists for instructor led training events, including adding and removing users from interest lists. This permission works in conjunction with Events - View, and Interest Tracking - View permissions. This is an administrator permission. Learning - Administration
Interest Tracking - View Grants view-only access to instructor led training Interest Lists, via the ILT Events and Sessions screen, enabling the user to view the Interest Lists for various ILT events. This permission works in conjunction with the Events - View permission. This is an administrator permission. Learning - Administration
Knowledge Bank - View Grants access to view Knowledge Bank. This is an end user permission. Learning
Knowledge Bank Administration Grants ability to create new Knowledge Bank topics and edit existing topics, including designating topic managers and setting availability for each KB topic. This is an administrator permission. Learning - Administration
Knowledge Bank Topic Expert Grants ability to post answers to questions posted to topics for which the user is designated as Topic Expert. Only Topic Experts may respond to Q&A posts in Knowledge Bank topics. Learning
Knowledge Bank Topic Manager Grants ability to add postings to Knowledge Bank topics for which the user is designated as Topic Manager. Also grants ability to specify experts, require posting approval and modify key words for those topics. Learning
Launch Curriculum Player Grants users the ability to launch a curriculum in the curriculum player view if the curriculum player option is enabled for the particular curriculum. This is an end user permission. Learning - Administration
LCMS Course Administrator Grants ability to create and manage online training courses using modules created in the Module Builder. Also requires assignment of LCMS license. This is an administrator permission. Learning - Administration
LCMS Create Courses Grants ability to create online training courses using modules created in the Module Builder. Can view and copy courses created by others. Can edit courses created by others if appropriate setting is activated by creator. Also requires assignment of LCMS license. This is an administrator permission. Learning - Administration
LCMS Create Modules Grants ability to create online training course modules that are used in the course builder to create a custom online course. Can view and copy modules created by others. Can edit modules created by others if appropriate setting is activated by the creator. Also requires assignment of LCMS license. This is an administrator permission. Learning - Administration
LCMS Design Templates - Manage Grants ability to create and edit design templates for use in building online training modules and courses in the LCMS. Also requires assignment of LCMS license. This is an administrator permission. Learning - Administration
LCMS Module Administrator Grants ability to create and view/update all online training course modules that are used in the course builder to create a custom online course. Also requires assignment of LCMS license. This is an administrator permission. Learning - Administration
Learner Home Grants access to the Learner Home and the Learning Search page. This is an end user permission. This permission cannot be constrained. Learning
Learner Home Preferences

Grants access to the Learner Home Preferences page, where the administrator can configure the arrangement of content on Learner Home, as well as other settings. This permission can be constrained by organizational unit (OU) and User's OU. This is an administrator permission.

With the Aug 2019 release, this permission also grants access to the Learning Search Preferences page, where the administrator can configure Learning Search options.

Learning - Administration
Learning Badge - View Grants ability to view the Badge field on the Learning Details page and the Training Completion page. This permission cannot be constrained. Learning
Learning Points - View Grants ability to view the Points field on the Learning Details page and the Training Completion page. This permission cannot be constrained. Learning
Learning Preferences Grant access to Learning Preferences. This permission must be combined with other permissions in order for specific preference links to appear. This is an administrator permission. Learning - Administration
Level 1 Evaluation Administration Grant Access to create and manage level 1 (reaction) evaluations associated with learning objects. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Level 1 Evaluations - Manage Grants ability to create and edit Level 1 (Reaction) learning evaluations that can be associated with learning objects. When viewing Course Console, this permission also grants the ability to view the status of Level 1 Evaluations. This permission works in conjunction with the Level 1 Evaluation Administration, Course Catalog - Update, and Course Catalog - View permissions. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Level 2 Evaluations - Manage Grants ability to create and edit Level 2 learning evaluations that can be associated with learning objects. When viewing Course Console, this permission also grants the ability to view the status of Level 2 Evaluations. This permission works in conjunction with the Level 2 Evaluation Administration (knowledge and scored), Course Catalog - Update, and Course Catalog - View permissions. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Level 2 Knowledge (Non-Scored) Evaluation Administration Grant Access to create and manage level 2 knowledge (non-scored) evaluations associated with learning objects. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Level 2 Scored Evaluation Administration Grant Access to create and manage level 2 (scored) evaluations associated with learning objects. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Level 3 Evaluation Administration Grant Access to create and manage level 3 (behavior) evaluations associated with learning objects. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Level 3 Evaluation - Manage Grants ability to create and edit Level 3 (Behavior) learning evaluations that can be associated with learning objects. When viewing Course Console, this permission also grants the ability to view the status of Level 3 Evaluations. This permission works in conjunction with the Level 3 Evaluation Administration, Course Catalog - Update, and Course Catalog - View permissions. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Library Administration - Manage Grants access to Library Administration screen, which enables administrators to create and manage libraries within the system. Only non-Cornerstone online courses can be added to a library. This is an administrator permission. Learning - Administration
Local Network Player - Download Courses from Catalog Grants access to the Download Network Player link in Course Catalog. Also, grants access to download courses to the local network from the Course Catalog. Users must also have permission to access the Course Catalog. A user can download any course to which the user has permission to view within the Course Catalog. This permission is controlled by a backend setting. This permission is recommended for end users of the LMS, local trainers, and LMS administrators. Learning
Local Network Player - File Download Link - View Grants access to the Download Network Player link in Course Catalog and on the Transcript. Users must also have permission to access the Course Catalog. This permission cannot be constrained. This permission is recommended for local trainers who deliver course content remotely. This is an end user and local trainer permission. If the user no longer needs to view the download link after installation, this permission can be removed for those users. Learning
Local Network Player - Launch Courses Offline Through the Network Player Enables users to see the Launch Locally link on their transcript for courses that have been downloaded and can be launched through the local network. This permission cannot be constrained. This permission is recommended for end users of the LMS. Learning
Local Network Player - Set Network Player Download Paths Preference Grants ability to set the preference that allows administrators to set the download paths to which users can choose to download courses. This permission is controlled by a backend setting. This permission can be constrained by OU or User's OU. This permission is recommended for local trainers and LMS administrators. Learning
LO Attachments - Manage Grants ability to upload attachments to learning objects. Administrators with this permission are automatically granted the LO Attachments - View permission. This permission can be constrained by User's ILT Provider, Provider, and ILT Provider. This is an administrator permission. Learning - Administration
LO Attachments - View Grants ability to view the learning object attachments that are set to be available to administrators. This permission can be constrained by User's ILT Provider, Provider, and ILT Provider. This is an administrator permission. Learning - Administration
LO Completion Approvals - Manage Grants ability, when editing a learning object via the course catalog, to specify number of approvals required when a user attempts to mark the learning object complete. This permission works in conjunction with the Course Catalog - Update permission. This is an administrator permission. Learning - Administration
LO Required Approvals - Manage Grants ability, when editing a learning object (LO) via the course catalog, to specify number of approvals required when users request that learning object. When viewing the Course Console, this permission also grants the ability to view the number of training approvals a user must receive when requesting the LO. This permission works in conjunction with the Course Catalog - Update and Course Catalog - View permissions. This is an administrator permission. Learning - Administration
Manage Custom Payment Types - Manage Grants access to the Manage Custom Payment Types page. As a best practice, this page should only be accessed and modified by Cornerstone. This permission cannot be constrained. This is an administrator permission. Learning
Mark Training Complete Grants ability to mark learning objects complete for other users, via the training details page when viewing the learning object from the user's transcript. This permission does not grant ability to mark a user's learning object complete from their Transcript page. This permission can be constrained by OU, User's OU, User, User's Self, and User Self and Subordinates. This is an administrator permission. Learning - Administration
Mark Transcript Exempt

Grants ability to exempt users from a learning object, using the "Mark Exempt" link on the top right corner of the target user's Transcript/Training details page. This permission can be constrained by OU, User's OU, and User's Subordinates. This is an administrator permission.

With the May '17 release, this permission also applies to prerequisites, pre-work, and post-work. Users without this permission cannot mark any training type exempt for a user.

Learning - Administration
Material Management - View Users Grants ability to view all users who have any version of the material on their transcript. Administrators with this permission can also access the transcript of enrolled users. This permission works in conjunction with the Materials Management permission. This permission can be constrained by OU, User's OU, and Provider. The constraints on this permission determine for which materials the administrator is able to view users and which users the administrator is able to view on the Enrolled Employees page. This is an administrator permission. Learning - Administration
Material Version with Append - Manage

Grants ability to create versions of a material. This permission works in conjunction with the Materials Management permission. This permission can be constrained by OU, User's OU, and Users.

This permission only applies to organizations that are using Versioning with Append for materials.

 Learning - Administration
Material Version - Replace Only - Manage

Grants ability to assign a new version of a material to a user. The constraints on this permission determine to which users the administrator can assign a new version of a material. This permission works in conjunction with the Materials Management permission. Without this permission, administrators cannot upload new material source files. This permission can be constrained by OU, User's OU, and Users. This is an administrator permission.

This permission only applies to organizations that are using Simplified Versioning for materials.

 Learning - Administration
Materials - Add Type Grants ability to add and edit Material learning object types. This permission works in conjunction with the Materials Management permission. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Materials Management Grants ability to view the Material Administration page and create, edit, and copy materials. Once created, these "materials" can be managed like other learning objects via the course catalog. This permission can be constrained by OU, User's OU, and Provider. The constraints on this permission determine which materials the administrator is able to view, edit, copy, and create. This is an administrator permission. Learning - Administration
MS Lync Portal Preferences - Manage Grants ability to manage MS Lync Preferences, including the API username, password, and endpoint for integration with Microsoft (MS) Lync. This permission cannot be constrained. This is an administrator permission. Learning - Administration
MyTeam Certifications - Manage

Enables managers To view details of direct and indirect reports' (or others depending on constraints) certifications (old designations module - retired May 2019). This permission can be constrained by OU, User's OU, and User's Direct Reports. This is primarily a manager permission. The permission constraints determine for which users the Certifications tab is available when viewing a user in My Team.

Note: By design, for any My Team permission that is included in the Manager default security role, all of the manager's direct and indirect reports are included in the constraints, even if they are not selected in the permission constraints for the role.

Note: If the user's permission is also constrained by User Self and Subordinates, then this overrides the User's Direct Reports constraint.

Learning
MyTeam Transcript - Manage Enables managers To view details of direct and indirect reports' (or others depending on constraints) to view transcripts (training records). This permission can be constrained by OU, User's OU, User's Direct Reports, User, User's Self, and User Self and Subordinates. The permission constraints determine for which users the Transcript tab is available when viewing a user in My Team. Note: By design, for any My Team permission that is included in the Manager default security role, all of the manager's direct and indirect reports are included in the constraints, even if they are not selected in the permission constraints for the role. Note: If the user's permission is also constrained by User Self and Subordinates, then this overrides the User's Direct Reports constraint. Learning - Administration
Offline Learning - Download application file from Transcript Grants ability to view the Download Offline Learning link on the transcript. This is an end user permission. Learning - Administration
Offline Player Network Learning - Flag courses to be available Offline from a network location Grants administrators the ability to designate online courses as available to be completed offline a network location using the Offline Network Player. This designation is done via the Course Catalog. This permission is only available if the Offline Network Player is enabled. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Offline Player Network Learning - Launch courses from a network location Grants end users the ability to access and utilize the Offline Network Player. This permission is only available if the Offline Network Player is enabled. This permission cannot be constrained. Learning
Offline Player Network Learning - Manage download courses and sync users' data Grants administrators the ability to download courses in order to be launched from a local network location. This permission also grants administrators the ability to sync users' data. This permission is only available if the Offline Network Player is enabled. This permission can be constrained by OU, User's OU, User, User's Self, User's Direct Reports, and User Self and Subordinates. This is an administrator permission. Learning - Administration
Old Offline Player Administration Enables the administrator to select which learning objects are available for use with the old Offline Player via the Course Catalog. This permission cannot be constrained. This is an administrator permission. Learning
Old Offline Player Enables the user to access to the old offline player functionality. Users with this permission can download courses to the old offline player as well as upload training results from the old offline player. Without the permission, users cannot see the link on the transcript page to retrieve the offline player key, they cannot log in to the offline player, and no uploaded results are accepted. This permission cannot be constrained. This is an end user permission. Learning
On the Job Training - Edit Grants ability to edit the On the Job Training section in Material Administration. This permission can be constrained by OU, User's OU, User, and User Self and Subordinates. This is an administrator permission. Learning - Administration
On the Job Training - Manage Grants access for Observers to record On the Job Training (OJT) completion on the OJT page. This permission can be constrained by OU, User's OU, User, and User Self and Subordinates. This is an end user permission. Learning - Administration
On the Job Training - Notify Observers Grants access for users to select On The Job Training Observers. This is an end user permission. Learning - Administration
On the Job Training - Observation History From Transcript Grants access for users to view On the Job Training Observation History from Transcript Details. This permission cannot be constrained. This is an end user permission. Learning - Administration
On the Job Training - View Grants ability to view the On the Job Training section in Material Administration. This permission can be constrained by OU, User's OU, User, and User Self and Subordinates. This is an administrator permission. Learning - Administration
On the Job Training Preferences - Manage Grants ability to view and edit the On the Job Training Preferences in Learning Preferences. This permission cannot be constrained.This is an administrator permission. Learning - Administration
Pending (Completion) Approval Training Details Grants ability to view the Approvals section of the Training Details page. This permission can be constrained by OU, User's OU, and Training Type. This is an end user permission. Learning
Pricing By OU Grants access to create and maintain differing pricing for learning objects (LOs) based on OU or Group, when editing learning objects via the Course Catalog. This permission works in conjunction with the Course Catalog - Update and Course Catalog - View permissions. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Proxy Enroll Session-Allow Seat Increase Grants ability to increase the number of seats for an Instructor Led Training Session when creating a Proxy Enrollment/Assignment. This option to increase seats only appears if a Session is selected in the Proxy Enrollment/Assignment. This is an administrator permission. Learning - Administration
Assignment Tool - Upload CSV File Grants ability to upload a .csv file as the User Criteria when creating a Learning Assignment. This permission is dependent on the Assignment Tool - Standard, Assignment Tool - Standard and Dynamic, and Assignment Tool - Standard and Dynamic - Recurrence permissions. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Proxy Enrollment for Certification - Create Dynamic Grants administrator ability to create dynamic proxy enrollments for certifications. This is an administrator permission. Learning - Administration
Proxy Enrollment for Certification - Create Standard Grants administrator ability to create standard proxy enrollments for certifications. This is an administrator permission. Learning - Administration
Proxy Enrollment for Certification – Remove Dynamic Grants administrator ability to create a proxy enrollment for certifications in which users are dynamically removed. This is an administrator permission. Learning - Administration
Proxy Enrollment/Assignment Schedule Time - Manage Grants ability to configure a Processing Start Time when creating a Proxy Enrollment/Assignment for Training and/or for Certifications. The Processing Start Time is the time of day that the Proxy Enrollment/Assignment will start to process users. This is an administrator permission. Learning - Administration
Remove Compliance Certification Allows administrator to remove a compliance certification from a user via the Users page. This permission works in conjunction with the Users - View and View User Certification (Compliance) permissions, and is for the old Compliance module, not the new Certifications module. This is an administrator permission. Learning - Administration
Remove Training Grants ability to remove training from other users' transcripts (training records) when viewing their transcript. This permission can be constrained by OU, User's OU, User's Corporation, User Self and Subordinates, User's Self, User's Direct Subordinates, and User. This is an administrator permission. Learning - Administration
Request Exemption from Training Grants ability to request Exemption from completing an assigned learning object, via the "Request Exemption" link on the top right corner of the Training details page for any transcript item. The request is sent to the persons allowed to approve Exemption requests of the submitting user. This permission cannot be constrained. This is an end user permission. Learning
Resource Requests - View Grants view-only access to instructor led training session facility Resource Requests (View Equipment Requests) via the ILT Facilities and Resources screen. This permission works in conjunction with the Facilities - View permission. This is an administrator permission. Learning - Administration
Resources - Create Grants ability to create resources that can be associated with instructor led training sessions. This is an administrator permission. Learning - Administration
Resources - Update Grants ability to edit existing resources that can be associated with instructor led training sessions. This is an administrator permission. Learning - Administration
Resources - View Grants view-only access to existing facility Resources (re-usable and non-re-usable assets associated with a training facility (location), such as projectors, training workbooks, etc.) This permission works in conjunction with the Facilities - View permission. This is an administrator permission. Learning - Administration
Roster - Add Attachments Grant user the ability to upload files to the Roster page. User must also have Manage Roster or View Roster permission. This is an administrator permission. Learning - Administration
Roster - Add Pending Users Grant ability to add pending users to the ILT session roster. The administrator must also have the Roster - Manage or Roster - View permission. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Roster - Add Users Grants ability to add named users to class rosters for instructor led training sessions. This permission works in conjunction with the Roster - View permission. This permission can be constrained by OU, User's OU, ILT Provider, and User's ILT Provider. This is an administrator permission. Learning - Administration
Roster - Batch Withdrawal or Move Users Grants ability to withdraw multiple users for an instructor led training session class roster, or to move them from one class roster to another. This permission works in conjunction with the Roster- View permission. Learning - Administration
Roster - Email Registered Users Grants ability to send a custom email message to all students listed on the roster for an instructor led training session. An additional link appears on ILT roster page for sending such messages. This is an administrator/ILT instructor permission. Learning - Administration
Roster - Increase Seats Grant user the ability to increase the session's available seats when adding users to the session roster if the added users exceed the number of available or reserved seats. User must also have Manage Roster or View Roster permission. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Roster - Manage Grants ability to manage instructor led training session rosters, including updating attendance, and marking the ILT session complete to update student transcripts. A variety of other features are available depending upon additional roster permissions. This permission works in conjunction with Events - View, Sessions - View, and Roster - View permissions. This permission can be constrained by Instructor, User as Instructor, ILT Provider, and User's ILT Provider. This is an administrator permission. Learning - Administration
Roster - View Evaluation Status Grants ability to view whether students' learning evaluations are pending for a given session. Without this permission, the admin sees status "completed" for any users who are actually in pending evaluation status on the roster This permission works in conjunction with Roster - View permission. This is an administrator permission. Learning - Administration
Roster - View Grants view-only access to instructor led training session rosters. This permission works in conjunction with Events - View and Sessions - View permissions. This permission can be constrained by Instructor, ILT Provider, User's ILT Provider, and User as Instructor. This is an administrator permission. Learning - Administration
Roster - Withdrawal Penalty Override Grants ability to override the withdrawal penalty when withdrawing a student from an ILT session. This permission works in conjunction with the Events - View, Sessions - View, Roster - View and Roster - Manage permissions. This is an administrator permission. Learning - Administration
Session Details - View Student Roster Allows user to view student roster for a given ILT session via a link on ILT session details screen when searching for training, and from transcript details screen after a session has been added to the user's transcript. This is an end user permission. Learning
Sessions - Cancel Grants ability to cancel instructor led training sessions. This permission works in conjunction with Events - View and Sessions - View permissions. This is an administrator permission. Learning - Administration
Sessions - Create Child Sessions

Grants ability to create new instructor led training child sessions available when the backend setting to allow multiple providers for a session is enabled. When the multiple providers backend setting is enabled, administrators need this permission to create child sessions even if they have the Sessions - Create permission. This permission works in conjunction with Events - View and Sessions - View permissions. This is an administrator permission.

Note: This permission is visible in the system even if the backend setting to allow multiple providers for a session is disabled. However, the functionality to create child sessions is only granted when the backend setting is enabled.

Learning - Administration
Sessions - Create

Grants ability to create new instructor led training sessions. This permission works in conjunction with Events - View and Sessions - View permissions. Administrators can only create sessions for events for which they have the availability to view. When adding users to a session in which the session roster is full, this permission grants the ability to increase the session's available seats. This permission can be constrained by OU, User's OU, Instructor, User as Instructor, Facility, Facilities Owned by User, ILT Provider, User's ILT Provider, User, and User Self and Subordinates. This is an administrator permission.

Note: The "Restrict to User as Instructor" constraint is available, but it does not actually constrain the permission.

Learning - Administration
Sessions - Edit Grants ability to edit/update existing instructor led training sessions. This permission works in conjunction with Events - View and Sessions - View permissions. Administrators can only edit sessions for which they have the availability to view and edit. When adding users to a session in which the session roster is full, this permission grants the ability to increase the session's available seats. This permission can be constrained by OU, User's OU, Instructor, User as Instructor, Facility, Facilities Owned by User, ILT Provider, User's ILT Provider, User, and User Self and Subordinates. This is an administrator permission. Learning - Administration
Sessions - View

Grants view-only access to instructor led training sessions, enabling the user to view all details/options that were selected when the session was created. This permission works in conjunction with the Events - View permission. This permission can be constrained by OU, User's OU, Instructor, Facility, Facilities Owned by User, ILT Provider, User's ILT Provider, User, User as Instructor, and User Self and Subordinates. This is an administrator permission.

Adding an OU constraint and a provider constraint to this permission results in an "AND" statement.

 Learning - Administration
Social Learning Cohorts - Edit Grants ability to access the Manage Cohorts page and to edit existing cohort learning objects. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Social Learning Cohorts - Manage Grants ability to access the Manage Cohorts page and to view, create, and edit cohort learning objects. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Social Learning Programs - Edit Grants ability to access the Manage Programs & Cohorts page and edit existing program learning objects. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Social Learning Programs - Manage Grants ability to access the Manage Programs & Cohorts page and view, create, and edit program learning objects. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Social Learning Programs - View Instructors Grants ability to search for instructors for program learning objects. The constraints on this permission limit which instructors the administrator can view when searching for instructors. This permission can be constrained by OU, User's OU, User, and User Self and Subordinates. This is an administrator permission. Learning - Administration
Subject Preferences - Manage Grants ability to configure what training subjects display to users within specific divisions, which effectively controls by what subjects (topics) they may browse for training from the Welcome Page when the Browse for Training widget is enabled. This is an administrator permission. Learning - Administration
Subjects - Manage Grants ability to create and edit Subjects (Training Topics) that can be associated with learning objects to facilitate training searches by end users. This is an administrator permission. Learning - Administration
Survey Administrator Grants ability to create and edit survey templates and launch survey tasks. This is an administrator permission. A content license is needed in addition to this permission in order to allow administrators to create and manage surveys. Learning - Administration
Test Engine - Grader This permission is not visible within the system because it is a dynamically assigned permission that is assigned to a user when they are added to a test as the grader. Users with this permission can access the Test Questions Pending Grading page. Constraints can be applied to this permission by applying constraints to the Test Engine Grader Constraints permission. Learning
Test Engine Grader Constraints Grants ability to apply org unit constraints to designated test graders. If no constraints are applied to this permission, then the grader can see all users for all tests for which they are a grader. If this permission is added to the security profile of a user that has not been dynamically assigned the Test Engine - Grader permission, then the user can access the Test Questions Pending Grading page but there will be no results visible. Learning
Test Engine - Manage Grants ability to create and edit/manage tests via the Test Engine. This permission can be constrained by OU, User’s OU, User, User’s Self, and User’s Subordinates. This is an administrator permission. Learning - Administration
Test Engine - Review Grants ability to view details of user results for tests, via the test engine. This permission can be constrained by OU, User’s OU, User, User’s Self, and User’s Subordinates. This is an administrator permission. Learning - Administration
Test Engine - View Grants ability to view existing tests in the test engine. Administrators with this permission can view each section of a test and print tests. Administrators with this permission can enter changes when viewing a test, but these changes cannot be saved. This permission can be constrained by OU, User’s OU, User, User’s Self, and User’s Subordinates. This is an administrator permission. Learning - Administration
Test Partial Scoring - Manage Grants ability to view and edit Partial Scoring for test engine Multiple Choice/Multiple Answer response type. Learning - Administration
Test Question Bank - Category Grants ability to create and edit/update categories for classifying test engine questions. This permission can be constrained by OU, User's OU, User, User's Self, and User's Subordinates. This is an administrator permission. Learning - Administration
Test Question Bank – Manage Grants ability to create and edit/update test questions in the test engine question bank. This permission can be constrained by OU, User’s OU, User, User’s Self, and User’s Subordinates. This is an administrator permission. Learning - Administration
Test Question Bank – View Grants ability to view the test engine question bank. This permission can be constrained by OU, User’s OU, User, User’s Self, and User’s Subordinates. This is an administrator permission. Learning - Administration
Training Certificate - Admin Grants access for administrators to view and print training certificates of completion on behalf of users. The link appears on the Transcript Details page for a user's completed learning objects. This is an administrator permission. Learning - Administration
Training Certificate - Self Grants access for users to view and print training certificates of completion for learning objects they have completed. The link appears on the Transcript Details page for the user's completed learning objects. This is an end user permission. Learning - Administration
Training Completion Page Preferences - Manage Grants ability to access and edit the Training Completion Page Preferences where the administrator can configure the default behavior for training completion pages, including whether a completion page is enabled by default for each learning object (LO) type and the default completion message that appears on the Training Completion page. This permission cannot be constrained. This is an administrator permission. Learning - Administration
Training Completion Signature Preferences Grants ability to manage Training Completion Signature preferences, to configure a required electronic training completion signature. This permission works in conjunction with the Learning Preferences permission. This permission can be constrained by OU and User's OU. This is an administrator permission. Learning - Administration
Training Custom Fields Grants ability to create and edit custom fields to be used for one or more learning object types. This is an administrator permission. Learning - Administration
Training Equivalency - Manage Allow users to define equivalent training items via the Course Catalog. This is an administrator permission. Learning - Administration
Training Equivalency - View Allow users to view equivalent training items when searching for training. This is an end user permission. Learning - Administration
Training Forecast Administration Grants access to create and edit training plans. This permission can be constrained by OU and User's OU. This is an administrator permission. Learning - Administration
Training Plan Co-Owner This permission is not visible within the system because it is a dynamically assigned permission that is assigned to a user when they are designated as a co-owner for a training plan. Users with this permission can access the Training Forecast Administration page and can only access training plans for which they are a co-owner. Learning
Training Plan Co-Planner - Add Grants ability to add a training plan co-planner if co-planners are enabled for the training plan. The permission constraints determine who can be selected as co-planner. This permission can be constrained by OU, User's OU, User Self & Subordinates, Manager, or Superiors. This is an end user permission. Learning
Training Plans - Manage Grants access to Training Plans screen, which allows plan managers and plan contributors to access their assigned training plans. This permission cannot be constrained. This is an end user permission. Learning
Training Plans Budgeting - Manage Grants ability to define and edit budgets for training plans. Users with this permission can view the company training budget. Users must also have the Training Forecast Administration permission. This permission cannot be constrained. Learning
Training Plans Budgeting - View Grants ability to view budgets for training plans. This permission cannot be constrained. Learning
Training Providers - Manage Grants ability to view all Training Providers (Vendors) and mark them active or inactive as needed. This is an administrator permission. Learning - Administration
Training Purpose - Edit User's Purpose Grants access to edit the training purpose and category on the user's transcript details. Admin must have access to user's transcript. This is an administrator permission. Learning - Administration
Training Purpose Administration - Manage Grants ability to manage Training Purposes. This is an administrator permission. Learning - Administration
Training Purpose Categories - Manage Grants access to manage Training Purpose categories. This is an administrator permission. Learning - Administration
Training Reasons Preferences - Cancellations Tab - Manage Grants access to the Cancellations tab on the Training Reason Preferences page. This permission can be constrained by OU and User's OU. This is an administrator permission. Learning - Administration
Training Reasons Preferences - Withdrawals Tab - Manage Grants access to the Withdrawals tab on the Training Reason Preferences page. This permission can be constrained by OU and User's OU. This is an administrator permission. Learning - Administration
Training Removal Catalog - View This permission enables constraining of training removal requests to learning objects that are available to the administrator as a user when searching for training. This permission works in conjunction with the Bulk Training Removal - Manage permission. This permission can be constrained by User and LO Availability. This is an administrator permission. Learning - Administration
Training Removal Reasons - Manage Grants ability to add and edit/update Training Removal Reasons, which can then be made to appear or not appear at the organizational unit level to administrators when removing Training from user transcripts. This permission can be constrained by OU and User's OU. This is an administrator permission. Learning - Administration
Training Removal - Remove Completed Grants administrators the ability to bulk remove training in Completed, Completed (Equivalent), and Exempt statuses from users' transcripts. This permission can be constrained by OU and User's OU. This is an administrator permission. Learning - Administration
Training Update Tool Grants access to the Training Update Tool. This tool enables administrators to mark multiple user transcripts complete for a single online course, quick course, test, or video via the upload of a csv file that includes user IDs, completion status, score and completion date. This is an administrator permission. Learning - Administration
Training-Restrict Prerequisite Pre-Work Post-Work Grants ability to restrict the select training popup, for prerequisites, pre-work, and post-work. This is an administrator permission. Learning - Administration
Transcript Preferences - Manage Grants ability to set Transcript Preferences. This permission can be constrained by OU and User's OU. This is an administrator permission. Learning - Administration
User Generated Content Video LO Grants ability to upload and submit video content from an iOS mobile device to the Pending Videos tab within Video Administration. The Add Training tab within the mobile app is only available with this permission. This permission cannot be constrained. Learning - Administration
Vendor Custom Fields - Manage Grants access to manage training vendor (provider) custom fields. Learning - Administration
Video Administration - Manage

Grants ability to create and manage video learning objects (LOs). The availability of this permission is controlled by a backend setting. This permission can be constrained by OU, User's OU, Provider, Self and Subordinates, and User. This is an administrator permission.

Note: If this permission is constrained to a group or OU, and a user becomes inactive or falls out of the availability of the group, NO ONE else in the group can edit the user's videos. Be sure to transfer ownership of videos to other active users prior to the original video creator leaving the group. The ownership of a video can only be transferred via billable work order.

Learning - Administration
Video Administration - View Grants ability to view video learning objects (LOs) on the Video Administration page. The availability of this permission is controlled by a backend setting. This permission can be constrained by OU, User's OU, Provider, Self and Subordinates, and User. This is an administrator permission. Learning - Administration
View Catalog Transactions Grants view-only access to Transactions tab when editing learning objects via the course catalog. This permission works in conjunction with the Course Catalog - Update permission. This is an administrator permission. Learning - Administration
Training Mobile - Manage Grants ability to configure the Mobile field for a training in the Catalog. This permission is dependent on the Course Catalog - View permission. This permission cannot be constrained. This is an administrator permission. Learning - Administration
View My Interests and Waitlists Grants access for users to view ILT interest lists and waitlists to which they've been added, and to take action when a matching ILT session is offered. This is an end user permission. Learning
View Transcript Item Grants ability to view details of learning objects that appear on the transcript (training record), by clicking on the name of the learning object. Users must also have the Bio About - View permission in order to access the transcript within Universal Profile. This permission can be constrained by OU, User's OU, User Self and Subordinates, User, or User's Self. This is an end user permission. Learning - Administration
VILT WebEx Extended Options : Set Defaults Allow WebEx admin to set defaults options for WebEx extended options for the entire portal. Learning - Administration
Web Service - CompleteLO - Request Grants ability to complete a learning object (LO) on a user's transcript via SOAP Web Services. This permission is required to perform the CompleteLO SOAP web service. This permission cannot be constrained. This is an administrator permission. Learning
Web Service - GetCertifications - Request Grants ability to retrieve details of a certification via SOAP Web Services. This permission is required to perform the GetCertificationsDetails SOAP web service. This permission cannot be constrained. This is an administrator permission. Learning
Web Service - GetCertificationsTranscript - Request Grants ability to retrieve a user's certification transcript details via SOAP Web Services. This permission is required to perform the GetCertificationsTranscript SOAP web service. This permission cannot be constrained. This is an administrator permission. Learning
Web Service - GetTranscriptandTask - Request Grants ability to retrieve a user's transcript and task details via SOAP Web Services. This permission is required to perform the GetTranscriptandTask SOAP web service. This permission cannot be constrained. This is an administrator permission. Learning
Web Service - GetUser - Request Grants ability to retrieve user details via SOAP Web Services. This permission is required to perform the GetUser SOAP web service. This permission cannot be constrained. This is an administrator permission. Learning
Web Service - ReconcileOUS - Request Grants ability to deactivate OUs for reconciliation via SOAP Web Services. This permission is required to perform the ReconcileOUS SOAP web service. This permission cannot be constrained. This is an administrator permission. Learning
Web Service - ReconcileUser - Request Grants ability to deactivate users for reconciliation via SOAP Web Services. This permission is required to perform the ReconcileUsers SOAP web service. This permission cannot be constrained. This is an administrator permission. Learning
Web Service - RegisterLO - Request Grants ability to register users for a learning object (LO) via SOAP Web Services. This permission is required to perform the RegisterLO SOAP web service. This permission cannot be constrained. This is an administrator permission. Learning
Web Service - RemoveLO - Request Grants ability to remove a learning object (LO) from a user's transcript via SOAP Web Services. This permission is required to perform the RemoveLO SOAP web service. This permission cannot be constrained. This is an administrator permission. Learning
Web Service - RequestLO - Request Grants ability to request a learning object (LO) for users via SOAP Web Services. This permission is required to perform the RequestLO SOAP web service. This permission cannot be constrained. This is an administrator permission. Learning
Web Service - SetOU - Request Grants ability to create and edit organizational units (OUs) via SOAP Web Services. This permission is required to perform the SetOU SOAP web service. This permission cannot be constrained. This is an administrator permission. Learning
Web Service - SetUser - Request Grants ability to create and edit a user's User Profile via SOAP Web Services. This permission is required to perform the SetUser SOAP web service. This permission cannot be constrained. This is an administrator permission. Learning
Web Service - WithdrawLO - Request Grants ability to withdraw a user from a learning object (LO) via SOAP Web Services. This permission is required to perform the WithdrawLO SOAP web service. This permission cannot be constrained. This is an administrator permission. Learning
Waitlists - Manage Grants ability to approve or deny instructor led training waitlist requests. This permission works in conjunction with the Events - View and Waitlists - View permissions. This is an administrator permission. Learning - Administration
Waitlists - View Grants view-only access to instructor led training session waitlists, via the ILT Events and Sessions screen, enabling the user to view the waitlists for various ILT sessions. This permission works in conjunction with Events - View and Sessions - View permissions. Learning - Administration
Withdraw Users from Sessions Allows administrators and managers to withdraw users from sessions on their behalf. This is done from the user's Transcript page. Note: There is a setting in the Session Defaults for an event that may prevent users from being able to withdraw from sessions. When this option is selected, users, managers, and administrators are prevented from withdrawing from sessions for themselves or on behalf of other users. This permission can be constrained by OU, User's OU, User's Self and Subordinates, User, User's Subordinates, and User's Direct reports. This is a manager or administrator permission. Learning
xAPI - Retrieve users' data from LRS Grants ability to retrieve xAPI data from the portal's LRS. This is an administrator permission. Learning - Administration
xAPI - View Learning Records on Transcript Allows users to view xAPI Learning Records on the Transcript. Learning
xAPI - Write data to the LRS on behalf of users Grants ability to write data to the LRS on behalf of users. This is an administrator permission. Learning - Administration
PERMISSION NAME PERMISSION DESCRIPTION CATEGORY
Create Media User Update Grants ability to associate links and files with user updates and tasks. This permission cannot be constrained. New Connect
Delete Connect Post/Comment Grants ability to delete Connect user posts and comments within the user's permission constraints. This permission does not apply to activity updates. This permission can be constrained by OU, User's OU, User Self and Subordinates, and User's Self. The permission constraints apply to the creator of the post or comment. New Connect
Edit Availability Knowledge Bank/Communities Grants ability to configure the availability when editing communities or when creating or editing topics. This permission does not grant the ability to edit a community; users can only edit a community or topic if they have the Manage Knowledge Bank/Communities Administration or if they are a moderator for the community or topic. When creating a topic, the constraints on this permission are automatically applied to the topic's availability. If the user also has the Manage Knowledge Bank/Communities Administration permission, then the constraints on that permission are automatically applied to the topic's availability. This permission can be constrained by OU, User's OU, and User's Corporation. New Connect
Global Search – Connect Grants ability to search for Knowledge Bank and community postings via Global Search. This permission cannot be constrained. The user's ability to view a posting is determined by the user's ability to view the posting's Knowledge Bank or community topic. This is an end user permission. The availability of this permission is controlled by a backend setting. New Connect
Manage Dynamic Teams Grants ability to manage and create dynamic Connect teams. This permission can be constrained by Facilities Owned by User, OU, and User's OU. The constraints on this permission determine which teams the user can manage on the Manage Dynamic Teams page. The constraints on this permission do not determine which users can be added or removed from a team. New Connect
Manage Knowledge Bank/Communities Administration Grants ability to view the New Knowledge Bank Administration page and manage Action Groups. Based on permission constraints, administrators with this permission can create and delete topics and subtopics. Administrators with this permission can view all communities, topics, sub-topics and postings, regardless of availability. In addition, administrators can add a posting to the Course Catalog. When creating a topic, the constraints on this permission are automatically applied to the topic's availability. This permission can be constrained by OU and User's OU. This permission is assigned to the default Administrator role by default. New Connect
New Team Grants ability to create new teams within the new Connect. This permission cannot be constrained. Which users are available is determined by the constraints upon the user's permission to view the Universal Profile - Bio page. New Connect
Send Connection Request Grants ability to send connection requests to other users within the new Connect. This permission can be constrained by OU and User's OU. The constraints that are placed upon this permission determine to whom the user can send connection requests. If a user is constrained by a specific OU, then the user can only send connection requests to users within that OU. New Connect
Update Broadcast Grants ability to broadcast organization-wide user updates within the new Connect. This permission cannot be constrained. New Connect
View Knowledge Bank/Communities Grants ability to view the Knowledge Bank and Communities pages. This permission can be constrained by OU and User's OU. This permission is assigned to the default Administrator role by default. New Connect
View New Connect Preferences Grants ability to view and manage the New Connect Preferences. This permission can be constrained by OU and User's OU. New Connect
View New Connect Grants ability to view the new Connect pages, including Live Feed, All Teams, Team Overview, Team Feed, Team Tasks, Task Details, and Connections. This permission cannot be constrained. New Connect
PERMISSION NAME PERMISSION DESCRIPTION CATEGORY
Training Forms - Manage Allows user to create and manage custom training form templates and create and assign training form tasks. This is an administrator permission. Training Forms Administration
Training Order Forms - Manage Grants access to the Manage Order Forms page, which allows administrators to create and manage order forms. The order forms act as promotional purchase pages which are displayed to end users. This is an administrator permission. Training Forms Administration
Training Request Form - Manage Grant access to create and edit training request forms, manage request form statuses, and manage form statuses for users. This is an administrator permission. Training Forms Administration
Training Request Form - Owner Allows user to act as Training Request Form Owner. The Training Request Form Owner is able to view and manage request form statuses for users by session. Owners can only see the Training Request Forms for which they are an owner. This permission is dynamically assigned when a user is selected as an owner for a training request form. This is an administrator permission. Training Forms Administration
Training Request Form Custom Fields - Manage Grants access to create and edit custom fields used for Training Request Forms. This is an administrator permission. Training Forms Administration
PERMISSION NAME PERMISSION DESCRIPTION CATEGORY
Action Items - EPM Grants ability to view and take action upon Performance (EPM) items on the Action Items page and in the Your Action Items widget. This permission can be constrained by OU, User's OU, User's Self, and User's Self and Subordinates. This is an end user permission. Universal Profile
Action Items - Forms Grants ability to view Form actions via the Universal Profile - Actions page or the Welcome/Custom page Actions widget. This permission cannot be constrained. Universal Profile
Action Items - LMS Grants ability to view and take action upon Learning (LMS) items on the Action Items page. This permission can be constrained by OU, User's OU, User's Self, and User's Self and Subordinates. This is an end user permission. Universal Profile
Action Items - View Grants ability to view action items on the Action Items page and in the Your Action Items widget. Users without this permission cannot access the Action Items page. This permission can be constrained by Employee Relationship, OU, User's OU, User's Self and Subordinates, and User's Self. This is an end user permission. Universal Profile
Bio About - View

Enables user to view the Bio page for users within their permission constraints. This permission must be enabled to view the Transcript page within Universal Profile. If a user does not have this permission and they click a person's name or user photo within the Universal Profile, then the Bio page will not open.

On the Learner Home page, this permission also allows end users to view the Completions & Hours field, the training sidebar, and the Continue Learning carousel.

This permission can be constrained by Employee Relationship, OU, User's OU, User's Direct Reports, User Self and Subordinates, and User. Note: For security purposes, this permission is constrained to User Self and Subordinates by default. However, the permission constraints can be modified to allow users to view the Bio About page for other users.

 Universal Profile
Bio About Preferences - Manage Enables administrator to access and edit the Bio About Preferences page. The availability of this permission is controlled by a backend setting. This permission can be constrained by OU and User's OU. This is an administrator permission. Universal Profile
Bio Career Preferences - View Grants ability to view the Bio - Career Preferences page for users within the permission constraints. This permission can be constrained by Employee Relationship, OU, User's OU, User Self and Subordinates, User's Direct Reports, User's Self, and User. Universal Profile
Bio Resume - View Enables user to view the Bio - Resume page for users within their permission constraints. If a user does not have permission to view the Bio - Resume page, then the Resume tab is not available. This permission can be constrained by Employee Relationship, OU, User's OU, User Self and Subordinates, User's Direct Reports, User's Self, and User. Universal Profile
Documents - Delete Enables user to delete a file that has been uploaded to the Snapshot - Documents page. The constraints on this permission determine which documents the user can delete. This permission can be constrained by Employee Relationship, OU, User's OU, User Self and Subordinates, Self and Direct Reports, User's Self, User's Manager, User's Superiors, User's Subordinates, and User's Direct Reports. Universal Profile
Feedback - Delete Enables user to delete a feedback post or comment on a user's page. The user can delete feedback from the Feedback page of any user who is within the permission constraints. This permission can be constrained by OU, User's OU, User Self and Subordinates, and User's Self. The permission constraints apply to the creator of the post or comment, not the target user. Universal Profile
Feedback - Request Enables user to request feedback from the Feedback page of their Universal Profile. Users can only request feedback from other users within their permission constraints. This permission can be constrained by OU, User's OU, User Self and Subordinates, and User's Self. This is an end user permission. Universal Profile
Feedback - View and Post Enables user to view the Feedback page of the Universal Profile and to post feedback. Users can only view the Feedback page for users within their permission constraints. Similarly, users can only post feedback for users within their permission constraints. This permission can be constrained by OU, User's OU, User Self and Subordinates, User's Self, and Employee Relationship. This is an end user permission. Universal Profile
Feedback Details - View Enables user to view the Feedback Details page and provide feedback when they are requested to provide feedback. This permission cannot be constrained. This is an end user permission. Universal Profile
Feedback Preferences - Manage Enables administrator to access and edit the Feedback Preferences page. From this page, administrators can configure which options are available when users are requesting and providing feedback within the Universal Profile: Feedback page. This permission can be constrained by OU and User's OU. This is an administrator permission. Universal Profile
Feedback - Request for other users Enables user to request feedback on behalf of other users from their Feedback page. This permission can be constrained by User's Subordinates, Direct Reports, and Custom Relationship. Universal Profile
Snapshot - Badges Enables user to view the Badges widget and subpage within the Universal Profile - Snapshot page for users within their permission constraints. This permission works in conjunction with the Snapshot Main - View permission. This permission can be constrained by OU, User's OU, User Self and Subordinates, User, User's Self, User's Manager, User's Superiors, User's Subordinates, User's Direct Reports, and Employee Relationship. Any user with this permission will always be able to view their own Badges widget when the widget is enabled. Best Practice: For most users, this permission should be constrained by User Self and Subordinates.

 

With the Aug '17 release, this permission also allows end users to view the Badges field on the Learner Home page.

 Universal Profile
Snapshot - Compensation Enables user to view the Compensation widget within the Universal Profile - Snapshot page for users within their permission constraints. This permission can be constrained by Employee Relationship, OU, User's OU, User Self and Subordinates, User, User's Self, User's Manager, User's Superiors, User's Subordinates, and User's Direct Reports. Best Practice: For most users, this permission should be constrained by User Self and Subordinates. Universal Profile
Snapshot - Competencies Enables user to view the Competencies widget and subpage within the Universal Profile - Snapshot page for users within their permission constraints. This permission can be constrained by OU, User's OU, User Self and Subordinates, User, User's Self, User's Manager, User's Superiors, User's Subordinates, User's Direct Reports, and Employee Relationship. Best Practice: For most users, this permission should be constrained by User Self and Subordinates. Universal Profile
Snapshot - Development Plans

Enables user to view the Development Plans widget and subpage within the Universal Profile - Snapshot page for users within their permission constraints. This permission can be constrained by OU, User's OU, User Self and Subordinates, User, User's Self, User's Manager, User's Superiors, User's Subordinates, User's Direct Reports, and Employee Relationship. Best Practice: For most users, this permission should be constrained by User Self and Subordinates.

 Universal Profile
Snapshot - Goals

Enables user to view the Goals widget and subpage within the Universal Profile - Snapshot page for users within their permission constraints. This permission also enables the user to view the My Goals page for users within their permission constraints via the View All Goals option in various pages in Universal Profile. This permission can be constrained by Employee Relationship, OU, User's OU, User Self and Subordinates, User, User's Self, User's Manager, User's Superiors, User's Subordinates, and User's Direct Reports.

Best Practice: For most users, this permission should be constrained by User Self and Subordinates.

Universal Profile
Snapshot - Leaderboard Enables user to view the Leaderboard widget and subpage within the Universal Profile - Snapshot page for users within their permission constraints. This permission works in conjunction with the Snapshot Main - View permission. This permission can be constrained by OU, User's OU, User Self and Subordinates, User, User's Self, User's Manager, User's Superiors, User's Subordinates, User's Direct Reports, and Employee Relationship. Any user with this permission will always be able to view their own Leaderboard widget when the widget is enabled. Best Practice: For most users, this permission should be constrained by User Self and Subordinates. Universal Profile
Snapshot - Peers Grants ability to view the Peers widget within the Universal Profile - Snapshot page. This permission can be constrained by OU, User's OU, User's Self and Subordinates, User, User's Self, User's Subordinates, and User's Direct Reports. This is an end user permission. Universal Profile
Snapshot - Reviews

Enables user to view the Reviews widget and subpage within the Universal Profile - Snapshot page for users within their permission constraints. This permission can be constrained by OU, User's OU, User Self and Subordinates, User, User's Self, User's Manager, User's Superiors, User's Subordinates, User's Direct Reports, and Employee Relationship. Best Practice: For most users, this permission should be constrained by User Self and Subordinates.

 Universal Profile
Snapshot Documents - View Grants ability to view the Documents widget and subpage within the Universal Profile - Snapshot page. This permission can be constrained by Employee Relationship, OU, User's OU, User's Self and Subordinates, User, User's Self, User's Manager, User's Superiors, User's Subordinates, and User's Direct Reports. This is an end user permission. Universal Profile
Snapshot Folder Preferences - Manage Enables administrator to view the Folder Preferences Admin page and manage folder creation, access, and deletion for the Documents page within Universal Profile: Snapshot. This permission cannot be constrained. This is an administrator permission. Universal Profile
Snapshot Main - View Enables user to view the Snapshot page for users within their permission constraints. This permission can be constrained by Employee Relationship, OU, User's OU, User Self and Subordinates, User, User's Self, User's Manager, User's Superiors, User's Subordinates, and User's Direct Reports. Best Practice: For most users, this permission should be constrained by User Self and Subordinates. Universal Profile
Snapshot Preferences – Manage Enables administrator to access and edit the Snapshot Preferences page. This permission can be constrained by Employee Relationship, OU, and User's OU. This is an administrator permission. Universal Profile
Snapshot Succession – Manage Enables user to view the Succession widget and subpage within the Universal Profile - Snapshot page for users within their permission constraints. On this page, users can view and manage successors and successor ratings. Users cannot view their own Succession widget and subpage, regardless of permissions. This permission can be constrained by OU, User's Subordinates, User's Direct Subordinates, and Employee Relationship. Universal Profile
Snapshot Succession - View Enables user to view the Succession widget and subpage within the Universal Profile - Snapshot page for users within their permission constraints. On this page, users can view successors and successor ratings. Users cannot view their own Succession widget and subpage, regardless of permissions. This permission can be constrained by OU, User's Subordinates, User's Direct Subordinates, and Employee Relationship. For most users, this permission should be constrained by User Self and Subordinates. Universal Profile
Universal Profile Preferences - Manage Enables administrator to access and edit the Universal Profile General Preferences page. This permission can be constrained by OU and User's OU. This is an administrator permission. Universal Profile

Edge and Data Load Permissions

PERMISSION NAME PERMISSION DESCRIPTION CATEGORY
Data Load Wizard - Compensation Enables administrator to load compensation data via the Data Load Wizard. This permission also enables administrators to track data loads and manage data load templates. This is an administrator permission. Data Load Wizard
Data Load Wizard - Competency Bank Enables administrator to load competency bank data via the Data Load Wizard. This permission also enables administrators to track data loads and manage data load templates. This is an administrator permission. Data Load Wizard
Data Load Wizard - Data Load Queue Enables administrator to access the Data Load Queue screen, which displays all data loads, including current and past loads. Constraints can be applied to this permission. However, these constraints do not impact which data loads are visible to the administrator. This is an administrator permission. Data Load Wizard
Data Load Wizard - Events Enables administrator to load event data via the Data Load Wizard. This permission also enables administrators to track data loads and manage data load templates. This is an administrator permission. Data Load Wizard
Data Load Wizard - Feed Configuration: Compensation – Create Enables administrator to access the Feed Summary page in order to create and edit compensation data feeds. This is an administrator permission. Data Load Wizard
Data Load Wizard - Feed Configuration: Compensation – Run Feed Enables administrator to access the Feed Summary page in order to manually run a compensation data feed once it has been created. This is an administrator permission. Data Load Wizard
Data Load Wizard - Feed Configuration: Compensation - Save Enables administrator to access the Feed Summary page in order to view and edit compensation data feeds. This is an administrator permission. Data Load Wizard
Data Load Wizard - Group Data Load Enables administrator to load group data via the Data Load Wizard. This permission also enables administrators to track data loads and manage data load templates. This permission cannot be constrained. This is an administrator permission. Data Load Wizard
Data Load Wizard - Learning Enables administrator to load learning data via the Data Load Wizard. This permission also enables administrators to track data loads and manage data load templates. This is an administrator permission. Data Load Wizard
Data Load Wizard - Load Sessions Enables administrator to load session LO data via the Data Load Wizard. This permission also enables administrators to track data loads and manage data load templates. This is an administrator permission. Data Load Wizard
Data Load Wizard - Load Transcripts Enables administrator to load transcript data via the Data Load Wizard. This permission also enables administrators to track data loads and manage data load templates. This is an administrator permission. Data Load Wizard
Data Load Wizard - Manage Templates Enables administrator to access the Manage Templates page within the Data Load Wizard. From the Manage Templates page, administrators can view, download, and archive templates. This permission cannot be constrained. This is an administrator permission. Data Load Wizard
Data Load Wizard - OUs Enables administrator to load OUs. This permission also enables administrators to track data loads and manage data load templates. This is an administrator permission. Data Load Wizard
Data Load Wizard - Resume Enables administrator to load resume data via the Data Load Wizard. This permission also enables administrators to track data loads and manage data load templates. This is an administrator permission. Data Load Wizard
Data Load Wizard - Set User Password Enables administrator to set a default password for new users when loading users. This is an administrator permission. Data Load Wizard
Data Load Wizard - Track Data Loads Enables administrator to access the Track Data Loads page within the Data Load Wizard. From the Track Data Loads page, administrators can print and download error and archive logs. This permission cannot be constrained. This is an administrator permission. Data Load Wizard
Data Load Wizard - Translator Enables administrator to load learning object (LO) translation data via the Data Load Wizard. This permission also enables administrators to track data loads and manage data load templates. This is an administrator permission. Data Load Wizard
Data Load Wizard - Users Enables administrator to load users. This permission also enables administrators to track data loads and manage data load templates. This is an administrator permission. Data Load Wizard
Data Load Wizard - Enable User GUID Enables the GUID in the Data Load Wizard User Load and mapping template. This enables organizations to include the GUID as the primary key for user data loads. This permission cannot be constrained. Data Load Wizard
PERMISSION NAME PERMISSION DESCRIPTION CATEGORY
Access Edge Bulk API History Grants access to the Bulk API History page, which displays all the loads that have been performed using the Bulk API. Administrators can select a load to view additional details of the load, including the results. This permission cannot be constrained. This is an administrator permission. Edge
Access Edge Bulk API

Grants ability to access and utilize the Bulk API. This permission cannot be constrained. This is an administrator permission.

This permission is only available when the Bulk API is enabled via Edge Marketplace.

 Edge
Bulk API - Cost Center OU

Grants ability to use the Bulk API to load cost center organizational unit (OU) data. This permission cannot be constrained. This is an administrator permission.

This permission is only available when the Bulk API is enabled via Edge Marketplace.

 Edge
Bulk API - Custom OU

Grants ability to use the Bulk API to load custom organizational unit (OU) data. This permission cannot be constrained. This is an administrator permission.

This permission is only available when the Bulk API is enabled via Edge Marketplace.

 Edge
Bulk API - Division OU

Grants ability to use the Bulk API to load division organizational unit (OU) data. This permission cannot be constrained. This is an administrator permission.

This permission is only available when the Bulk API is enabled via Edge Marketplace.

 Edge
Bulk API - Employee

Grants ability to use the Bulk API to load employee data. This permission cannot be constrained. This is an administrator permission.

This permission is only available when the Bulk API is enabled via Edge Marketplace.

 Edge
Bulk API - Grade OU

Grants ability to use the Bulk API to load grade organizational unit (OU) data. This permission cannot be constrained. This is an administrator permission.

This permission is only available when the Bulk API is enabled via Edge Marketplace.

 Edge
Bulk API - Legal Entity OU

Grants ability to use the Bulk API to load legal entity organizational unit (OU) data. This permission cannot be constrained. This is an administrator permission.

This permission is only available when the Bulk API is enabled via Edge Marketplace.

 Edge
Bulk API - Location OU

Grants ability to use the Bulk API to load location organizational unit (OU) data. This permission cannot be constrained. This is an administrator permission.

This permission is only available when the Bulk API is enabled via Edge Marketplace.

 Edge
Bulk API - Position OU

Grants ability to use the Bulk API to load position organizational unit (OU) data. This permission cannot be constrained. This is an administrator permission.

This permission is only available when the Bulk API is enabled via Edge Marketplace.

 Edge
Edge APIs - Manage Grants ability to manage Edge APIs on the API Management page. Edge
Edge Develop - API Explorer Grants access to the API Explorer, which provides access to help documentation for various API applications. Edge
Edge Integrations - Manage Grants access to the Integrations service for Edge Integrate where the administrator can configure, enable, and disable their third-party integrations that are used within the Cornerstone system. This permission cannot be constrained. This is an administrator permission. Edge
Edge Marketplace - Manage Grants access to the Marketplace service for Edge Integrate where the administrator can browse and purchase integrations that can be used to extend the Cornerstone system. This permission cannot be constrained. This is an administrator permission. Edge
External Job Application API: Manage Grants access to manage the Job Application API. This permission is automatically enabled upon enabling either the Cornerstone API bundle or the One-Click Apply with Stepstone integration. Only available if enabled by a backend setting. Edge
PERMISSION NAME PERMISSION DESCRIPTION CATEGORY
Access CHR - Employee Load Grants access to the Cornerstone HR (CHR) employee data load via Edge Import. This permission and data load type are only available to organizations using CHR. This permission cannot be constrained. This is an administrator permission. Edge Import
Access Edge Import Grants access to the Edge Import tool, which enables administrators to load data into their portal. This permission cannot be constrained. This is an administrator permission. Edge Import
Access Edge Import Workflow - Cost Center Grants access to the Cost Center OU data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access Edge Import Workflow - Custom OU Grants access to the Custom OU data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access Edge Import Workflow - Division Grants access to the Division OU data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access Edge Import Workflow - Grade Grants access to the Grade OU data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access Edge Import Workflow - Legal Entity Grants access to the Legal Entity OU data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access Edge Import Workflow - Location Grants access to the Location OU data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access Edge Import Workflow - Position Grants access to the Position OU data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access LMS - Curriculum Load

Grants ability to access load reports and perform Curriculum load and Curriculum Structure loads via Edge Import. This permission cannot be constrained. This is an administrator permission.

 Edge Import
Access LMS - Curriculum Transcripts Load Grants access to the Curriculum Transcripts data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access LMS - Events Load Grants access to the Events data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access LMS - External Training Load Grants access to the External Training data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access LMS - Facilities Load Grants access to the Facilities data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access LMS - ILT Instructors Load Grants access to the ILT Instructors data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access LMS - ILT Transcripts Load Grants access to the ILT Transcripts data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access LMS - Learning Object Equivalencies Load Grants access to the Learning Object (LO) Equivalencies data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access LMS - Material Transcripts Load Grants access to the Material Transcripts data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access LMS - Online Course Assets Load Grants access to the Online Course Assets data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access LMS - Online Course Metadata Load. Grants access to the Online Course Metadata data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access LMS - Online Transcripts Load Grants access to the Online Transcripts data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access LMS - Providers Load Grants access to the Providers data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access LMS - Question Category Load Grants access to the Question Category data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access LMS - Question Load Grants access to the Question data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access LMS - Session Parts Load Grants access to the Session Parts data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access LMS - Sessions Load Grants access to the Sessions data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access LMS - Subjects Load Grants access to the Subjects data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access LMS - Test Mapping Load Grants access to the Test Mapping data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access LMS - Test Transcripts Load Grants access to the Test Transcripts data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access LMS - Tests Load Grants access to the Tests data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access LMS - Video Transcripts Load Grants access to the Video Transcripts data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Access LMS - Videos Load Grants access to the Videos data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import
Create/Update Configurations Grants ability to create and update Edge Import configurations. This permission cannot be constrained. This is an administrator permission. Edge Import
Delete Configurations Grants ability to delete Edge Import configurations. Users with this permission can delete configurations created by anyone for all types of data imports. This permission cannot be constrained. This is an administrator permission. Edge Import
Disable Data Load Wizard

Grants access to the Disable DLW tab within the DLW Migration tool. From the Disable DLW tab, administrators can disable Data Load Wizard for the portal. This permission cannot be constrained. This is an administrator permission.

Important: Disabling a DLW type is a permanent action, and it cannot be undone. It is important to only disable a DLW type once you have fully migrated to the corresponding loads and feeds in Edge Import.

Edge Import
Edge Import - Load Employee Salary Grants access to the employee salary data load via Edge Import. This permission cannot be constrained. This is an administrator permission. Edge Import

Reporting Permissions

The Reporting 2.0 functionality is controlled by a series of permissions that allow you to create more specific reports by report field. For this reason, permissions are at more of a granular level with this functionality.

The permissions are broken down by the main product level permission, section level, and then at the field level. For example, if you wanted to report on Instructor Led Training (ILT) in the system, you would need:

  • The Reporting - Manage permission to create reports.
  • The Reporting - View permission to preview reports and view reports.
  • The top-level product specific permission to create reports related to that product.
    • e.g. Reporting - Learning - Manage
  • The section specific permission to create reports for that feature within the product.
    • e.g. Reporting - Learning - ILT - Manage
  • The field level permissions to be able to create reports with the specific fields for that feature within the product.
    • e.g. Reporting - Learning - ILT - ILT Facility - Manage

If a user does not have each level of permission, then they may not have access to the report builder, or the section may not be visible, or the fields within the section may not be visible. Also, if a user does not have the top-level product permission, then none of the fields for that product will be visible, such as the fields for LMS reports.

The power of this granularity of permissions is that you can give access to as many or as few fields as necessary for your users. For example, you may give users access to the User section but not give them access to the User Identifier section if that contains sensitive data for your portal.

If a user has all relevant permissions, but the corpsetting for a particular area is set to FALSE, any fields related to that section will still appear blank in a report. An example where this could occur is SCORM 2004 quiz data.

Note: When a user has a top-level, section, or field level permission, it is not necessary to also assign the Reporting - Manage or Reporting - View permissions since the more granular product specific permissions will give the user access to Reporting 2.0.

Note: Due to sensitivity, users who need to report on Gender, Ethnicity and Grade information, would need the following permissions in addition to the reporting permissions:

  • For Gender: User Upload - Gender
  • For Ethnicity: User Upload - Ethnicity
  • For Grades: View Grades

List of Permissions

For the full list of permissions and their relationships, see the permissions spreadsheet in Online Help.

The Reporting - Apply Owner Constraints permission grants the ability to turn on the Apply Owner Constraints setting for reports in the Report Properties panel. This setting affects shared users, delivery, and reports published to dashboards.

When the setting is enabled, the report owner's constraints are applied to the report, and users that run the report will see the report with the report owner's constraints instead of their own. For reports published to dashboards the owner constraints are only applied if the underlying report is also shared with the user. If just the dashboard is shared, but not the report itself, the users own constraints are applied even though the toggle is set to apply owner constraints.

Due to the possibility of unintended user data becoming visible to a user viewing a report with the report owner's constraints, it is recommended that filters be added to the report to restrict data visibility. It is also recommended that the report owner test the report prior to sharing to ensure the data visibility is appropriate and intended.

The Reporting - Download permission grants users the ability to download Reporting 2.0 reports. This permission cannot be constrained; however, when users download a report, any Reporting - View constraints are applied. Users with the permission see the download option on the Report Home and the Report Viewer.

For clients that have already opted in and previously activated Reporting 2.0, this new permission is added automatically to the System Administrator role and to any security role that currently has at least one Reporting - View permission.

For clients that are opting in and activating Reporting 2.0 for the first time with the August ’18 Release, this new permission is available to administrators in the System Administrator role who can then add the permission to other roles at their discretion. Users without this permission will not see any download options in the Report Home or the while Viewing Reporting 2.0 reports.

The Reporting - Email Delivery permission grants the ability to deliver reports in Reporting 2.0. Users must also have permission to view reports. The permission can be used in conjunction with the various product, section, and field level permissions. Users must have permission to view Reporting 2.0 in order to have access to a report that is delivered to them. If they do not have view access, then the Reporting 2.0 navigation sublink will not display for them.

Users who have permission to manage Reporting 2.0 can edit a report that is delivered to them. They can also copy the delivered report.

The following constraints are available for this permission:

  • OU
  • User’s OU
  • User Self and Subordinates
  • User
  • User's Self
  • User's Manager
  • User's Superiors
  • User’s Subordinates
  • User’s Direct Subordinates
  • Employee Relationship

This permission grants access to the Custom Reports Usage Report in Reporting 2.0. The report is available for administrators only.

The report can be accessed by clicking the Import Custom Reports button on the Reporting 2.0 homepage, and then clicking the Custom Reports Usage Report link in the Import Your Custom Reports flyout.

See Reporting 2.0 - Custom Reports Migration Tool.

The Reporting - FTP Delivery permission grants the ability to schedule delivery of Reporting 2.0 reports to an FTP directory. This permission cannot be constrained.

This permission is used in conjunction with the view permission for Reporting 2.0 and can also be used in conjunction with the various product, section, and field level permissions. Users must have permission to view Reporting 2.0 in order to have access to a report that is delivered to them. If they do not have view access, then the Reporting 2.0 navigation sublink will not display for them.

Users who have permission to manage Reporting 2.0 can edit a report that is delivered to them. They can also copy the delivered report.