Overview
Superadmins are Stellic users who are able to access the Staff tab in the Stellic platform in order to create groups, activate users, and assign permissions to other users. Superadmins have the ability to view all other admins in the platform and assign any available permission accordingly. Superadmins are assigned when your institution's Stellic instance is created, and can only be assigned by Stellic.
Because of the vast amount of responsibility that Superadmins have, some institutions may also want to implement a more limited role to assist with permission management. This role is a Limited Superadmin. Superadmins have all of the responsibilities of Limited Superadmins (and much more), including the ability to make Limited Superadmins group Moderators.
Other Roles to Assist in Permission Management
The following describes the multiple roles associated with permission management and their different responsibilities.
Role | Access the Staff tab | Create groups | Add users to groups | Assign permissions to users and groups | Activate and deactivate users |
Superadmin | Yes | Yes | Yes | Yes | Yes |
Limited Superadmin | Yes | Yes | For groups they have created | Only permissions they themselves have | No |
Moderator (must be a Limited Superadmin to become a Moderator) | Yes | Yes - inherited from Limited Superadmin role | No | Only permissions they themselves have | Only users in the groups they are moderating |
Editor (must be a Limited Superadmin to become an Editor) | Yes | Yes - inherited from Limited Superadmin role | Only groups in which they are an Editor | Only permissions they themselves have | No |
Limited Superadmins
Limited Superadmins are able to manage permissions and activation/de-activation of users within their designated scope. They will be able to access the Staff tab, and view all users and groups within the Staff tab, but unlike a Superadmin, they will have limited control over editing permissions, activating/deactivating users and managing groups.
A Limited Superadmin can only assign/pass-on permissions to other users and staff groups that they already have - in other words, if the Limited Superadmin doesn't have for themselves the permission they are trying to assign to another user or group, they will receive an error message. Similarly, Limited Superadmins cannot remove permissions from users or groups that they do not also have.
Note: Like Superadmins, Limited Superadmins can only be assigned by the Stellic team. Please contact your Stellic representative if you're interested in using Limited Superadmins at your institution.
Managing User Activation/Deactivation for Limited Superadmins: Moderators
In order to allow Limited Superadmins to activate/deactivate users, we have introduced the role of group Moderators. This means that the responsibility of activating or deactivating users is separated from the responsibility of a Limited Superadmin, and a Limited Superadmin must be a Moderator in order to activate or deactivate any users. Moderators can only activate or deactivate users that are part of the group they are moderating.
Only Superadmins can assign or remove moderators for a group from a user's profile or group profile.
Key Points About Moderators:
Only Superadmins and Limited Superadmins can become group Moderators (regular admin members cannot become a moderator).
Superadmins becoming Moderators of a group gives them no special rights as they are already able to activate/deactivate members.
ONLY Limited Superadmins who are marked as Moderators can activate/deactivate users who are members of the groups that they have Moderator rights over.
Moderators cannot activate or deactivate users unless the users are part of a group that they are moderating.
Important: The Moderator permission only allows you to activate/deactivate members of the group, this does not include any of the "edit" permissions for that user group.
Editor Role for Limited Superadmins
Limited superadmins can create any group with any users. If they create a group, they are auto-assigned the role of the group Editor. (Note: This will not be displayed anywhere in the UI and cannot be removed unless the group is deleted.) For any group where the Limited Superadmin does not have the Editor role, the Limited Superadmin will only be able to view the group without making any changes to it.
The Editor role includes:
Adding/removing user members of that group
Changing visibility/purpose of the group
Deleting the group
Editing the name of group
Edit relationship of members within the group
The Editor role does NOT include:
Ability to check/assign ALL permissions for the group - they can only assign/pass-on the permissions to staff groups that they already have
Ability to activate/deactivate users (this can only be done if a Limited Superadmin is a Moderator of the group)