# Support Role Restriction

**URL:** <https://community.ethosce.com/t/support-role-restriction/3014>\
**Category:** Roles and Permissions\
**Created:** [June 24, 2024, 4:13pm UTC](https://community.ethosce.com/t/support-role-restriction/3014 "2024-06-24T16:13:17Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![betsy.lee](https://avatars.discourse-cdn.com/v4/letter/b/df705f/32.png) [@betsy.lee](https://community.ethosce.com/u/betsy.lee)\
**Post date:** [June 24, 2024, 4:13pm UTC](https://community.ethosce.com/t/support-role-restriction/3014/1 "2024-06-24T16:13:17Z")

</div>

I there a way to restrict the Support Role to a specific course?

I have two course managers who need access to enrollments and reports for their course we built for them. The Support Role would be perfect, but we do not want to give them access to this information in all courses.

Likewise, since this course is in a Learning Group, I can make them Admin Members, but again, this gives them permissions to edit all courses in the LG - definitely not something we want them to have.

While I could give one the Course Author role, this does not help for the second person.

Has anyone else run into this issue? How did you handle it?

Thanks, Betsy

---

<div class="post-metadata">

**Author:** ![JAM](https://sea1.discourse-cdn.com/flex015/user_avatar/community.ethosce.com/jam/32/595_2.png) [@JAM](https://community.ethosce.com/u/JAM)\
**Post date:** [June 24, 2024, 4:57pm UTC](https://community.ethosce.com/t/support-role-restriction/3014/2 "2024-06-24T16:57:33Z")

</div>

HI Betsy -

This is an ongoing issue for us… we brought up improvements to roles quite a while back. Would be great if things could be set at a more granular level. The role we “give out” most often is the report viewer. Technically people who have this role could look at any course reports. To be proactive, we ask each person to sign a usage/access document - they agree to only look up stuff relevant to their courses. We also don’t explain that they have global access… we send them instructions to access reports for their course… we add in the link to their course, etc. so they are always (hopefully) going directly there when they want to review their reports. There are also concerns about the amount of access people have when they have the faculty coordinator role, but it’s necessary to give to our RSS coordinators so they can manually enroll someone to a session if need be.  
Would LOVE for Ethos to get serious about addressing this issue. Happy to be part of a committee that helps figure out how best to improve roles in the system!

---

<div class="post-metadata">

**Author:** ![chuck.rodgers](https://avatars.discourse-cdn.com/v4/letter/c/6bbea6/32.png) [@chuck.rodgers](https://community.ethosce.com/u/chuck.rodgers)\
**Post date:** [June 24, 2024, 5:11pm UTC](https://community.ethosce.com/t/support-role-restriction/3014/3 "2024-06-24T17:11:17Z")

</div>

Agree that the ability to assign roles would be very useful and go a long way with meeting security standards around least privileged access.

Chuck

---

<div class="post-metadata">

**Author:** ![gmartinez](https://avatars.discourse-cdn.com/v4/letter/g/898d66/32.png) [@gmartinez](https://community.ethosce.com/u/gmartinez)\
**Post date:** [June 24, 2024, 7:50pm UTC](https://community.ethosce.com/t/support-role-restriction/3014/4 "2024-06-24T19:50:35Z")

</div>

We’ve also suggested this to Ethos multiple times. We also want to see a support role that can be restricted on a course by course basis.

---

<div class="post-metadata">

**Author:** ![nwhitney](https://sea1.discourse-cdn.com/flex015/user_avatar/community.ethosce.com/nwhitney/32/603_2.png) [@nwhitney](https://community.ethosce.com/u/nwhitney)\
**Post date:** [June 25, 2024, 1:31pm UTC](https://community.ethosce.com/t/support-role-restriction/3014/5 "2024-06-25T13:31:42Z")

</div>

Good morning everyone!

We are so excited to see this level of activity on the community, and we love to hear feature requests like this! I’ll be reaching out in the coming days to schedule quick calls with a few of you to gather some more concrete requirements for this ask, so that we may add it to our feature backlog and complete this improvement as part of our upcoming Drupal 10 upgrade. Please let me know if you’d be interested in meeting with me to discuss further!

-Nathan

---

<div class="post-metadata">

**Author:** ![JAM](https://sea1.discourse-cdn.com/flex015/user_avatar/community.ethosce.com/jam/32/595_2.png) [@JAM](https://community.ethosce.com/u/JAM)\
**Post date:** [June 25, 2024, 1:55pm UTC](https://community.ethosce.com/t/support-role-restriction/3014/6 "2024-06-25T13:55:00Z")

</div>

Yes please, sign me up Nathan - thank you!

---

<div class="post-metadata">

**Author:** ![ldjackson](https://avatars.discourse-cdn.com/v4/letter/l/7ea924/32.png) [@ldjackson](https://community.ethosce.com/u/ldjackson)\
**Post date:** [June 25, 2024, 2:46pm UTC](https://community.ethosce.com/t/support-role-restriction/3014/7 "2024-06-25T14:46:43Z")

</div>

Would love to discuss. We are a JA provider and are trying to promote Joint Providership services. Without having more defined permissions in EthosCE it is difficult to allow our partners access in EthosCE.

---

<div class="post-metadata">

**Author:** ![betsy.lee](https://avatars.discourse-cdn.com/v4/letter/b/df705f/32.png) [@betsy.lee](https://community.ethosce.com/u/betsy.lee)\
**Post date:** [June 25, 2024, 4:05pm UTC](https://community.ethosce.com/t/support-role-restriction/3014/8 "2024-06-25T16:05:02Z")

</div>

Hi Nathan,  
would love to meet with you to discuss this further.

---

<div class="post-metadata">

**Author:** ![betsy.lee](https://avatars.discourse-cdn.com/v4/letter/b/df705f/32.png) [@betsy.lee](https://community.ethosce.com/u/betsy.lee)\
**Post date:** [July 23, 2024, 2:35pm UTC](https://community.ethosce.com/t/support-role-restriction/3014/9 "2024-07-23T14:35:10Z")

</div>

Hi Nathan,

any updates on this support role restriction request? I would love to speak with you to discuss implementation of this improvement. Hope to hear back from you soon.

---

<div class="post-metadata">

**Author:** ![nwhitney](https://sea1.discourse-cdn.com/flex015/user_avatar/community.ethosce.com/nwhitney/32/603_2.png) [@nwhitney](https://community.ethosce.com/u/nwhitney)\
**Post date:** [July 23, 2024, 2:53pm UTC](https://community.ethosce.com/t/support-role-restriction/3014/10 "2024-07-23T14:53:59Z")

</div>

Good morning Betsy! I just reached out to you via email to coordinate some time for a meeting. Looking forward to our meeting!

---

<div class="post-metadata">

**Author:** ![betsy.lee](https://avatars.discourse-cdn.com/v4/letter/b/df705f/32.png) [@betsy.lee](https://community.ethosce.com/u/betsy.lee)\
**Post date:** [July 23, 2024, 3:49pm UTC](https://community.ethosce.com/t/support-role-restriction/3014/11 "2024-07-23T15:49:10Z")

</div>

Hi Nathan, checking with the team for some good times. Will get back to you via email soon.

Betsy
