The "Course - delete" permission is not permitting courses to be deleted

[canvas_support6]

Hi All,

    We are trying to replace our root "Account Admin" users with lower privileged accounts. We have an API that uses the "delete /courses/{courseId}?" API. When it is called with full "Account Admin" it returns 204 and removes the user. But when I call it with the following permissions it fails with 401 Unaithorized:

Admin - manage / update
Courses content - add / edit / delete
Courses - view list
Course content - view
Courses - add
Courses - conclude
Courses - delete
Courses - publish
Courses - change visibility
Courses - undelete
Manage Course Sections
SIS Data - read
SIS Data - manage

Which additional privilege is required to get this working?

I have a very similar issue with delete user API as well. ie I have enabled most user permissions and still can't delete.

Thanks,

Simon

[A_K_Dekker]

Not entirely sure if this helps, but I`ve noticed and later read that enabling new permission on a role takes some time to come into effect. Only disabling a permission is instantaneous. See the remark at the top of this document: https://community.canvaslms.com/t5/Admin-Guide/What-user-roles-and-permissions-are-available-in-Canv...

Have you allowed for some time to let the change come into effect?

[canvas_support6]

Yes I have noticed a delay also. It is normally two hours. I have now left this configuration for over 12 hours and it is still throwing 401s.

Simon

[canvas_support6]

If Canvas recognises permission removal faster than addition. I guess a reasonable strategy would be to create a full privilege account and remove privileges one at a time. 

[canvas_support6 · Accepted solution]

I resolved this issue by granting the role the "Manage Course Files" and "Manage Pages" permissions. I was also informed you can push the role through to the user faster by changing the users timezone away and back again (have not tested this however).

Simon