There are two types of users in Canvas: Account-level users and Course-level users.
Canvas comes with one default Account-level user role that includes permissions that affect the entire account as well as courses. Account admins can create account-level user roles with modified permissions. For more information about account-level permissions, view the Canvas Account Permissions PDF.
Canvas has five default Course-level user roles, each with permissions that affect their ability to interact with Canvas courses. Account admins can create course-level user roles. For more information about course-level user permissions, view the Canvas Course Permissions PDF.
You can also view a video about Canvas Permissions.
Note: When you change a permission, it can sometimes take 30 minutes or longer for that permission to take effect. If the expected changes do not appear immediately, try again after some time has passed.
Course-level roles are roles with permissions that allow a user course-level access. Usually users with these roles cannot see more than what is in their Canvas courses.
Canvas provides five base course-level user roles that each include their own set of default permissions. You can manage the permissions according to the needs of your institution. You can also create custom course roles that are created from a base role. The Canvas base roles are:
Note: All user permissions trickle down through an account. Additionally, all permissions modifications affect all users assigned to a role. You may need to create a custom course-level user role for users whose course-level permissions you would like to vary from others'.
Account admins have the power to set permissions for all users in Canvas. Admins can create additional account-level roles with account-level permissions. The default permissions for account admins can include access to everything within the account, plus the ability to masquerade as a user.
Each sub-account has its own permissions page, so admins can create account-level roles within a sub-account and add sub-account permissions directly within the sub-account. Sub-account admins can only only manage permissions and settings for the sub-accounts to which they've been assigned. However, some permissions may not be available for sub-account users. To learn more, view the Account vs. Sub-Account Comparisons PDF.