Multi-tenancy capabilities
From Learnit docs
Template:Workplace Template:Work in progress
Workplace and core capabilities and how they affect permissions to work with users
| Capability | Description | Tenant admin |
|---|---|---|
| tool/tenant:manage | Can browse users in any tenant | |
| tool/tenant:allocate | Can see all tenants, browse users in all tenants, move users between tenants | |
| tool/tenant:manageusers | Can browse, edit, delete, suspend users in the current tenant or its sub-tenants WP-1124 | |
| tool/tenant:browseusers | Can browse users in the current tenant or its sub-tenants | Yes |
| tool/tenant:authconfig | Can edit authentication settings in the current tenant and its sub-tenants | Yes |
| moodle/restore:createuser | No WP-929 | |
| moodle/site:viewuseridentity | Yes | |
| moodle/site:uploadusers | Yes | |
| moodle/user:create | ||
| moodle/user:delete | ||
| moodle/user:update | ||
| moodle/user:viewdetails | ||
| moodle/user:viewalldetails | Yes | |
| moodle/user:viewlastip | ||
| moodle/user:viewhiddendetails | ||
| moodle/user:loginas | ||
| moodle/user:managesyspages | ||
| moodle/user:manageblocks | ||
| moodle/user:manageownblocks | ||
| moodle/user:manageownfiles | ||
| moodle/my:configsyspages | ||
| moodle/course:reviewotherusers | ||
| moodle/course:bulkmessaging | ||
| moodle/course:viewhiddenuserfields | ||
| moodle/site:viewparticipants | No WP-1520 | |
| moodle/user:editprofile | ||
| moodle/badges:awardbadge | Yes | |
| moodle/badges:revokebadge | ||
| moodle/badges:viewawarded | Yes | |
| moodle/site:messageanyuser | ||
| moodle/role:assign | Yes | |
