Introduction
Delegating activities to other users is a strategic move that enhances efficiency, empowers users, and ensures that the administrative team can focus on critical responsibilities. It's a win-win approach that benefits both admins and the organization as a whole.
Superadmins can delegate their activities to other users, called Power Users.
Depending on the size and structure of your organization, consider creating a Power User hierarchy, so that some Power Users can manage other Power Users to create a structured and efficient ecosystem, promote knowledge sharing, and enhance the overall support and user experience.
Consider assigning different responsibilities (such as user management, content management, support, etc.) to different Power Users to take advantage of their expertise in specific areas. Take inspiration from the Community Guide on Power Users Personas (opens in a new tab).
This article explains how to create Power Users, and configure Power User profiles with different permissions.
Requirements & Limitations
- Power Users can manage other Power Users only when the Make the Power User management permission available, allowing Power Users to manage other Power Users and the profiles assigned to them as resources option is enabled in the platform Advanced settings.
- Power Users with managing permissions on other Power Users cannot create Power Users profiles, only Superadmins can.
Learn more on DoceboU
Want to learn more about Power Users? Have a look at the dedicated course, Delegating Administrative Tasks with Power Users (opens in a new tab) on Docebo U!
Use case scenarios
- The definition of Power User profiles is very useful for the management of branches located in different countries, or in association with the Extended enterprise app, to manage different domains.
- Superadmins can grant some Power Users permission to manage other Power Users, making them Super Power Users and creating a user hierarchy within the platform. Super Power Users are a step above Power Users: they have the authority to manage and oversee the activities of multiple Power Users across the platform, maintaining order, security, and efficient operations within the system.
Definition of "Profile"
When talking about Power Users, a “profile” has a double meaning:
Profiles as Sets of Permissions
Profiles are sets of permissions created by Superadmins that determine what actions Power Users can perform on the platform. Only Superadmins can create profiles and assign them to Power Users. Profiles streamline the platform management by allowing Superadmins to assign and adjust permissions for multiple Power Users based on their roles or responsibilities. Power Users are typically assigned to one or more profiles which define their privileges within the platform. For example, you might have profiles like "User manager" or "Content manager," each one with different permissions. Learn more about creating profiles.
Profiles as Resources
Profiles can be assigned as resources to the Power Users with permissions to manage other Power Users using the same assignment process of other resources (users, courses and learning plans, locations, etc.), so that they can, in turn, assign them to the Power Users they manage. Learn more about assigning resources to Power Users.
Creating a Power User
As a first step, create your Power Users either by following the standard user creation procedure, setting the user level as Power User or directly from the Power User management area. To do so, access the Admin menu by clicking on the gear icon in the top right corner. In the E-Learning section, select the Power Users item. The Power Users management page is composed of two tabs:
- Power Users. This tab lists all of the Power Users configured in your platform
- Profiles. This tab lists all of the Power User profiles already configured in your platform.
To create a Power User, click on the plus button in the top right corner, then select New Power User.
In the right panel that opens, select the users you want to define as Power Users and click on Confirm.
Creating a Power User profile
A profile is a set of permissions that you grant to Power Users. Superadmins can configure as many profiles as they need in the platform but remember that you can assign up to 10 profiles to each Power User. Power Users with permission to manage other Power Users are not allowed to create profiles.
In order to create a new Power User profile, from the main Power Users management page, click on the plus button in the top right corner, then select New profile.
In the right panel, set a profile name and, optionally, a profile description. For security reasons, both the profile name and the profile description are checked according to the OWASP guidelines (opens in a new tab) and will be sanitized to avoid injections. Click on Create and edit to start the configuration.
Use the General section to edit the profile name and description, if necessary. Please note that the following characters < > \ | / = + are not accepted in the profile name field, and you will not be allowed to save the changes related to the profile when the name includes those characters.
Use the Pre-Populate User Additional Fields area to select the user additional fields that will be automatically populated with the data of the Power Users associated with the profile when they create new users. To do so, click on Select additional fields, select one or more fields from the right panel that will open by clicking the checkboxes next to their field names, and click on Select to confirm your action. This step is optional. Please note that the user additional fields defined as Invisible to the user are not automatically populated upon the user creation.
Move now to the Manage Permissions section to assign the rights to the profile, that is what the Power Users assigned to the profile will be authorized to do in your platform. Click Add permission, and select an area from the corresponding dropdown, in the right panel that will open. Once you pick up an area, use the Type dropdown to define whether you want to assign all permissions related to the selected area to the Power User profile, or select the Custom permissions option to choose a subset of permissions from the third dropdown.
Please note! Have a look at the complete list of the permissions available for the configuration of Power User profiles to have an overview of the available permissions and relevant options.
Once you have completed your selection, click Confirm. The permission you have added is listed in the recap bottom area of the Manage Permissions section. Repeat the permission selection for all of the areas you wish to assign to the profile.
Granting profiles to Power Users
Once the Power User profile has been created, you can grant it to Power Users. While on the profile creation page, move to the Power Users tab, click on the Grant Power Users button in the top right corner, select the Power Users you want to grant to the profile from the right panel, and click Grant. When you grant a profile to a Power User, you’re giving them the permissions assigned to that specific profile.
You can remove any of the Power Users granted to the profile at any time, from the Power Users tab. To do so, hover your mouse at the end of the Power User row, click on the ellipsis menu and select Unassign from profile. Once a Power User is removed from a profile, they will no longer be able to use the permissions assigned to the profile, but will still be a Power User of your platform.
At any time, you can grant a profile to Power Users from the Profiles tab of the Power Users management page by hovering your mouse over the ellipsis menu at the end of the profile row and selecting Grant to Power Users.
To grant more than one profile to a Power User, select the profiles by clicking on the checkboxes next to their names, and select Choose action – Grant to Power Users in the bottom right corner of the table. The granting of more than one profile happens in the background, as a background job.
You can also grant a profile to a Power User from the Power Users tab of the Power Users management page by clicking the icon of the Granted profiles column in the row of the Power User, or by hovering over the ellipsis menu at the end of the Power User row and selecting Grant profiles. Use the Remove Assigned Profiles to do the opposite: remove one or more profiles assigned to the selected Power User.
You can check the profiles granted to each Power User, as well as a recap on the pre-populated additional fields and the assigned permissions from the Power Users management page by clicking on the Power User name and moving to the Properties tab.
From this page, click on Grant profiles to grant additional profiles to the selected Power User, selecting them from the right panel that opens. As you add profiles, the Permissions recap section populates with the list of permissions linked to the granted profiles.
Please Note! You can grant up to 10 profiles to every Power User.
Assigning resources to Power Users
The permissions that Power Users inherit from the profiles granted to them apply to the resources they can manage. To assign resources to a Power User, click on their name in the Power Users tab.
Move to the Assigned Resources tab to assign the Power User to resources: users, groups, branches, courses, learning plans, catalogs, locations, folders of the Central repository, and Power User profiles.
Select the Resource Type from the left menu, click on Assign resources, and proceed with the resource selection.
As an option, you can quickly assign resources to a Power User from the main Power Users management page. Click on the ellipsis menu at the end of the Power User row, then select the Assign resources option. In the right panel, choose the type of resource you wish to assign, and click on the Next button to finalize your selection.
You can also assign the same resources to a selection of Power Users with a single action. To do so, select the Power Users by checking the checkboxes corresponding to their rows, then click Choose action in the bottom right corner of the page, and select the Assign resources option.
Please note! Resource assignments to Power Users are not effective until the Power User logs in for the first time after the assignment is made. This is valid both for direct resource assignments (e.g., assigning a group to a Power User) and indirect assignments (e.g., a user being added to a group to which the Power User is already assigned).
Please note! When scheduling and exporting reports, remember that the visibility of Power Users over resources follows the refresh latency of the other data in the reports, and is not reflected in real time. More information on resource assignment for Power Users in the following chapter.
Notes on resource assignments
- When a Power User assigns a resource to a user (e.g., enrolls a user in a course, or assigns a subscription), other Power Users cannot undo the assignment. Only Superadmins can modify or invalidate the assignments made by Power Users.
- When a Power User has no branches assigned as resource:
- Users created by that Power User will be placed in the root branch.
- When creating or editing users, that Power User will have visibility on all the additional fields, even if additional fields visibility based on branch nodes has been set.
- If a Power User is assigned to a user belonging to a branch the Power User is not assigned to, the Power User can assign the user only to one of the branches they are managing.
- When assigning an entire set of resources to one or more Power Users (all courses, all learning plans, etc.), the assignment is considered a dynamic sum of all the resources, which changes depending on the resources created or deleted in the platform. This behavior is reflected in filters too. For example, if you filter Power Users using the Without learning plans filter, the results page will never include the Power Users assigned to all learning plans, even if there is no learning plan in your platform.
- If a Power User is also a manager, they will have visibility over the resources (courses, learning plans, catalogs, etc.) available to the users they are managing. As an example, when a Power User with manager permissions navigates the My team page, they will be able to see the courses and the learning plans where their team members are enrolled, even when not directly assigned to them.
-
When a Power User is assigned to a profile including the Notifications permission, the Power User will only be able to manage the notifications related to the resources assigned to them.
- If a notification does not include the resources associated with the Power User, then they will not be able to manage them (view, create, edit or delete them) no matter what permission they are assigned to.
- Similarly, when the Power User is not associated with the resources assigned to the notification, they will not be able to manage them.
- If you assign a learning plan as a resource to a Power User, they will also have visibility and managing permissions on the courses it includes according to the permissions on courses granted to the profiles they belong to.
- If you assign Power User profiles as resources to a Power User, remember to assign them also the Power Users they can manage as resources from the Users section of the Resource type panel of the Power User’s assigned resources tab.
- If your platform has been activated before October 21, 2019, when a Power User assigns the user to a branch they are managing, the user will be kept in both branches. If your platform has been activated after October 21, 2019, users can belong to only one branch. If the Power User assigns the user to one of the branches they are managing, the user will be removed from the previously assigned branch.
- When scheduling and exporting reports, remember that the visibility of Power Users over resources follows the refresh latency of the other data in the reports, and is not reflected in real time. Instead, the reflected data will be the one obtained after the last data refresh. As an example, if you edit a Power User’s permissions by adding or removing courses associated to the Power User, the changes you made to Power User permissions are NOT immediately reflected in the value of the filters available in the Filters tab of the Reports menu and are NOT immediately reflected in the courses that are extracted and visible in the report. Instead, filters and reports will remain unchanged until the next data refresh. Keep in mind that this delay concerns all the data and so the Power User will not see any change in the data compared to what existed before your changes. For more information on reports, refer to the dedicated article of the Knowledge Base.
- Parent Power Users are allowed to see all the resources assigned to the Power Users managed by them in the Power Users management page, including those not assigned to them in the first place, but they cannot manage them in turn if those resources are not also assigned to them. In addition, if they unassign the resources not assigned to them, they will not be able to assign them back.
Managing Power Users
You can manage the Power Users you have created in your platform from the Power Users management page, either individually or in groups.
From the Power Users tab of the Power Users management page, click on the ellipsis menu at the end of the Power User row to perform the following actions:
- Power User overview. When you select this option, you will access a quick recap of the resources and the profiles assigned to the Power User, as well as an overview of the permissions they are granted on the basis of the assigned profiles.
- Edit. Use this option to edit the details of the selected Power User.
- Assign resources. Use this option to quickly assign resources to the selected Power User. See the Assigning Resources to Power Users chapter of this article for further details.
- Assign Profiles. Use this option to quickly grant profiles to the selected Power User. See the Granting Profiles to Power Users chapter of this article for further details.
- Unassign Profiles. Select this option to quickly unassign more profiles from the selected Power User with a single action.
- Log In as This Power User. As a Superadmin, you can temporarily login as a Power User in your platform to perform actions on their behalf to help with troubleshooting in their learning platform. The same option is available in the Power User profile, in the top right corner. Learn more about impersonating a Power User.
- Unassign All Courses. Use this option to unassign all of the courses, learning plans and categories from the selected Power User.
- Switch to User Level. Use this option to demote the Power User to a normal user. When you do so, all of the profiles and the resources assigned to the Power User will be unassigned.
You can perform most of the above-mentioned actions on several Power Users at a time. To do so, select the Power Users by clicking on the checkboxes next to their usernames, and then click on Choose Action in the bottom right corner of the table to take advantage of the following options:
-
Assign resources. Use this option to assign to the selected Power Users:
- a custom selection of resources, see the Assigning resources to Power Users chapter of this article for further details
- all the courses available on your platform
- all the learning plans available on your platform
- all the courses and learning plans available on your platform
- all the courses and the learning plans visible in catalogs. When you select this option make sure that the Power User is assigned to a profile enabled to manage catalogs.
- Grant profiles. Use this option to grant one or more profiles to the selected Power Users. See the Granting Profiles to Power Users chapter of this article for further details.
- Unassign all profiles. Use this option to unassign all of the profiles linked to the selected Power Users from them. Since this option results in the selected Power Users no longer being assigned to any profile, to proceed with this action, the platform will ask you if you also want to demote the selected Power Users to normal users.
- Unassign all courses. Use this option to unassign all of the courses, learning plans and categories from the selected Power Users.
- Switch to user level. Use this option to unassign the selected Power Users to their role, demoting them to normal users. When you do so, all of the profiles and the resources assigned to the Power User will be unassigned.
Creating and managing Power Users via CSV files
In your platform, you can create and manage users using CSV files. When creating or managing Power Users with this method, remember that you can assign up to 10 profiles per Power User.
To create a Power User via CSV file, set the user data field Level as poweruser and use the Profile Name data field to list the names of the Power User profiles you want to assign to the user. Profile names must be separated by the | character (pipe, or, vertical bar). When assigning multiple profiles to a Power User, do not use | as the separator in the CSV file.
Distributing paid courses through Power Users
If you offer paid courses on your platform, a common situation is that you do not want learners to have to directly make purchases. Instead, you can set up a configuration where a Power User handles the transactions and/or takes care of enrolling their learners.
Some mechanisms to do this include:
- Seats: A Power User with the permission Can buy and assign seats for courses and learning plans can purchase or be granted a certain number of seats in a paid course, which they can then use to enroll their learners. See the article Managing seats for paid courses.
- Purchase on behalf: A Power User with the permission Course catalogs / Allow Power User to buy courses and learning plans on behalf of someone else can purchase a course or learning plan for someone else. See the article Navigating and Managing your Shopping Cart.
Tips and tricks
- The Power Users who have permission to create courses can also set course categories for the course. If another Power User has visibility to the same course category, the two Power Users are then able to work together to build out the courses in that category.
- If your platform is organized in branches and you must assign a Power User to each branch/sub-branch, use a CSV file instead of a manual assignment. During the CSV import, configure the Auto assign branches to Power Users functionality.