The Privileges page allows administrators to see all available privileges and the roles for which those privileges are permitted. Each privilege lists the role types and role IDs that have the privilege.
- Go to Administrator Panel > Privileges.
- In the Search box, type the search terms.
- Select whether your search terms apply to Privileges, System Roles, or Course Roles.
- Select Go.
In the list of results, select a Role ID to manage its privileges. You're brought to the role's Manage Privileges page, where you can permit or restrict privileges.
Review the privileges granted to various roles, and determine whether they are necessary. This supports the security principle of least privilege. One example is whether the assigned roles require the privilege of Add/Edit trusted content with scripts. This allows assigned users the ability to enter dynamic content into the system whether they are malicious or not.