Roles and permissions

Every user in your account has one or more roles. The roles decide what that person sees and can do. You set them per user in Users → pick a user → Edit, in the User roles for the current account section.

Roles are set for your account only. If someone works in more than one account with us, the roles you give them here have no effect anywhere else.

The roles

Role	What it gives
Learner	Sees the courses assigned to them and their own results and certificates. Nothing else. This is the role for everyone who is only there to take training.
Group Manager	Reads reports — dashboard, progress, results per user and per course — but only for the groups they are a member of themselves, so you control what they see by adding them to groups. Cannot assign courses and cannot create users.
Learning Manager	Creates and edits groups, assigns courses to groups and to individual users, sends invitations and reminders, corrects a learner's progress, and reads all reports for the whole account. Sees the course library.
Account Admin	Manages users — create, edit, deactivate, delete, CSV import — manages groups and who belongs to them, browses the E-SEC course catalog and adds courses to your library, and changes the account settings.
Billing Admin	Subscription, orders, invoices and payment settings, plus browsing the catalog and previewing courses.

Account Admin can manage other admins

The user management does not stop at other Account Admins — an admin can edit, deactivate and delete them too. Give the role only to people you would trust with the whole account.

Roles add up

A user can have several roles, and the permissions simply add up. Three things follow from that, and they surprise people regularly:

An Account Admin cannot roll out courses

Account Admin covers users, groups, the catalog and the account settings — but not assigning courses and not the reports. Someone who is meant to plan training and check completion rates needs Learning Manager as well.

A Learning Manager cannot add users

Learning Manager covers the roll-out and the reports, but not creating or importing users, and not the course catalog. Someone who is meant to upload employee data needs Account Admin as well.

Group Manager plus Learning Manager is not a restricted Learning Manager

The two can be ticked together, but the restriction does not survive it: Learning Manager reports on the whole account, and the wider access always wins. Everything Group Manager gives is already included in Learning Manager, so the combination adds nothing and only removes the limit. Pick Group Manager instead of Learning Manager whenever limiting the view is the point.

Common combinations:

The person should…	Give them
Only take training	Learner
Watch the numbers for their own site or team, nothing more	Group Manager
Plan training, invite people, evaluate everything	Learning Manager
Do all of that, and maintain the users and the course library too	Learning Manager + Account Admin
Take care of the contract and the invoices	Billing Admin

Note that Learner is a separate checkbox. A Learning Manager or Account Admin without it can plan and evaluate training, but they do not see course trainings. Tick Learner as well for anyone who also has to complete the training themselves.

Taking access away

To cut off someone's access, untick User is active in their user record. They keep their data, their learning history and their certificates but cannot sign in, and you can switch it back on at any time — unlike deleting the user.

You cannot deactivate yourself or remove your own Account Admin role, so you cannot lock yourself out of your own account.