Export of list of assigned permissions per role

[wojcika]

Hi!

I am have been searching for a few days now but have been unable to find a method of exporting a list of course or account roles and there assigned permissions. I have been tasked with analyzing this data to make sure users have the correct access. Any help would be greatly appreciated. 

Thank you!

[matthew_buckett]

You can get the roles and the permissions assigned to each role from: https://instance.instructure.com/api/v1/accounts/self/roles

The documentation for this is on: https://canvas.instructure.com/doc/api/roles.html#method.role_overrides.api_index

If you have lots of roles you will need to page through the results as documented on:

https://canvas.instructure.com/doc/api/file.pagination.html

To work out what users have access to what accounts/courses I'd use the provisioning report that can be run from the Reports tab: https://community.canvaslms.com/t5/Admin-Guide/How-do-I-view-reports-for-an-account/ta-p/109 These reports can also be run through the API if you want to automate the whole process: https://canvas.instructure.com/doc/api/account_reports.html

[kehomi]

Thank you for that information but it does not tell us how to export the list of roles/permissions so that we can audit them 

[wojcika]

Thank you, I see this is mostly done by API. 

[oneilllj]

Hi @wojcika 

It sounds like you will need to access the reports in the Admin section of your Canvas instance.

If you click on Admin --> Reports --> Scroll to Provisioning --> Click on Configure.... Select Term date; Enrolments and Admin --> Run Report (see image below).

This will give you information as follows:

Enrolments - for each course you will be able to see those connected to acourse, including their role (for example, we have teacher/student/observer). This essentially provides you a summary of Course Roles as set in Permissions

Admin - for each person with an 'Admin' role as set in Permissions, this will show what their role is (for example, Subject Leader, Admin). This essentially provides you a summary of the Account Roles as set in Permissions

You might need to combine the information, but it gives a method to start the audit. 

Hopefully this is of assistance.

Thanks

Jen