User roles

Reference for the three KC7 user roles and what each one can and can't do.

KC7 has three roles. Each one has a different scope and a different set of permissions. This page describes each role and lists every action by role.

This page is a reference. For instructions on assigning roles, see manage users.

Roles at a glance

Role	Scope	Typical use
Tenant Manager	Entire tenant	Full administrative access
Classroom Manager	Assigned classrooms	Classroom-level management
Participant	Enrolled games	Playing games

Tenant Manager

• Scope. Entire tenant.

• How assigned. Automatic for the user whose tenant is created. Existing Tenant Managers can promote others.

• Removable. Yes, by another Tenant Manager.

Tenant Managers can create, modify, and delete classrooms; manage every user; assign any role including other Tenant Managers; access every classroom, game, and analytics view; configure tenant-wide settings, branding, and integrations; export any data; and manage billing.

Most organizations need 2 to 5 Tenant Managers.

Classroom Manager

• Scope. One or more assigned classrooms.

• How assigned. A Tenant Manager grants the role per classroom.

• Removable. Yes, by a Tenant Manager.

Classroom Managers can create, configure, and delete games inside assigned classrooms; add and remove participants; view analytics and export data; and modify classroom settings.

They can't access classrooms they aren't assigned to, create new classrooms, change tenant-wide settings, assign roles, or manage billing.

A single user can manage multiple classrooms. Useful for instructors teaching several sections.

Participant

• Scope. Enrolled games.

• How assigned. Automatic when someone joins a classroom or gets added to a game.

• Removable. Yes, by removing them from the classroom or game.

Participants can play enrolled games, submit answers, earn badges, track their own progress, and see leaderboards when enabled.

They can't see other participants' detailed answers or analytics, and they have no management features.

Permission matrix

Classrooms

Action	Tenant Manager	Classroom Manager	Participant
Create classroom	Yes	No	No
View classroom	All	Assigned	No
Edit classroom settings	All	Assigned	No
Delete classroom	Yes	No	No
Customize appearance	All	Assigned	No

Games

Action	Tenant Manager	Classroom Manager	Participant
Create game	Yes	In assigned classroom	No
Configure game settings	Yes	In assigned classroom	No
Delete game	Yes	In assigned classroom	No
Play game	Yes	Yes	If enrolled
View game link	Yes	In assigned classroom	If enrolled

Users

Action	Tenant Manager	Classroom Manager	Participant
Add participants	Yes	To assigned classroom	No
Remove participants	Yes	From assigned classroom	No
Assign Tenant Manager	Yes	No	No
Assign Classroom Manager	Yes	No	No
View user list	All	Assigned classroom	No

Analytics and data

Action	Tenant Manager	Classroom Manager	Participant
View classroom analytics	All	Assigned	No
View game analytics	All	Assigned	No
View individual progress	All	Assigned classroom	Own only
Export data	All	Assigned classroom	No
Generate reports	All	Assigned classroom	No

Tenant settings

Action	Tenant Manager	Classroom Manager	Participant
Modify tenant settings	Yes	No	No
Configure integrations	Yes	No	No
Manage billing	Yes	No	No
View audit logs	Yes	No	No
Configure SSO	Yes	No	No

Common questions

Can a Classroom Manager promote another user?

No. Only Tenant Managers can assign Tenant Manager or Classroom Manager roles.

What happens to a user's data when their role changes?

Historical data, analytics, and contributions are preserved.

Why can't a user see something they should?

Confirm the role, the classroom assignment, and that the user has logged out and back in. Role changes can take a few minutes to propagate.

Related

• Manage users

• Organize classrooms

• Manage games