***************************************************
Roles and Permissions Open edX
***************************************************


Roles LMS
###############

Course Staff and Course Admin can assign permissions to new users to limit their permissions. Each user can log on to the LMS App; their Role will dictate which parts of the App are accessible. Each user can edit their password.

.. list-table:: Roles and Permissions
   :widths: 50 50
   :header-rows: 1

   * - Role
     - Description
   * - Course Admin
     - Platform administrator and support agents.
   * - Course Staff
     - Instructors and content creators.
   * - Course Data Researcher
     - Instructor assistant, grade manager, course monitor
   * - Discussion Moderator
     - Assistant instructor, course instructor
   * - Beta Tester
     - Beta users, course instructor
   * - Student
     - For Students


Permissions by Role (LMS)
#########################

The following table displays which actions in the app each user has access to.

.. list-table:: Permissions
   :widths: 15 30 30 30 30 30 30 30 30 30 30 30 30
   :header-rows: 1

   * - Roles
     - Creation of organizations
     - Access to Studio
     - Create and edit content
     - Grant or revoke permits
     - Have full access to the instructor dashboard in the LMS
     - Access to the course before the start date
     - Send emails to students
     - Reset number of attempts
     - Edit, delete and manage comments in student forums
     - View the course after the start date
     - Participate in discussion forums
     - Access to the "Data Download" tab of the Instructor dashboard
   * - Course Admin
     - No
     - Yes
     - Yes
     - Yes
     - Yes
     - Yes
     - Yes
     - Yes
     - No
     - Yes
     - Yes
     - No
   * - Course Staff
     - No
     - Yes
     - Yes
     - No
     - Yes
     - Yes
     - Yes
     - Yes
     - No
     - Yes
     - Yes
     - No
   * - Course Data Researcher
     - No
     - No
     - No
     - No
     - No
     - No
     - No
     - No
     - No
     - Yes
     - No
     - Yes
   * - Discussion Moderator
     - No
     - No
     - No
     - No
     - No
     - No
     - No
     - No
     - Yes
     - Yes
     - Yes
     - No
   * - Beta tester
     - No
     - No
     - No
     - No
     - No
     - Yes
     - No
     - No
     - No
     - Yes
     - Yes
     - No
   * - Student
     - No
     - No
     - No
     - No
     - No
     - No
     - No
     - No
     - No
     - Yes
     - Yes
     - No


Roles DJANGO SYSADMIN
#####################

Roles with which you can access the django admin where you can view your site logs and more.

.. list-table:: Roles and Permissions
   :widths: 50 50
   :header-rows: 1

   * - Role
     - Description
   * - Sysadmin
     - User with the most permissions granted.
   * - Sys staff
     - User with which you can login to DJANGO admin

Permissions by Role (DJANGO ADMIN)
##################################

.. list-table:: Permissions
   :widths: 15 30 30 30 30
   :header-rows: 1

   * - Roles
     - Access to Django Sysadmin
     - Access to all tables to modify records manually
     - Restricting access to tables to staff users
     - Access to authorized tables
   * - Sysadmin
     - Yes
     - Yes
     - Yes
     - No
   * - Sys staff
     - Yes
     - No
     - No
     - Yes