Managed privilege to view System Roles – 3900.67
Blackboard Learn SaaS, Blackboard Learn 9.1
Ultra Experience, Original Experience
Ultra Course View, Original Course View
Impact: Administrators, Developers
Developers create applications that expand the functionality of Blackboard Learn. Some of these apps integrate using REST APIs. Administrators manage the privileges for integrated apps. As a best practice, an integration should only have the minimum privileges necessary to function.
In the past, if an integration needed to read System Role information, the integration user had to be set as a full System Administrator. Now administrators can configure an integration user with fewer privileges and still grant access to view System Role information.
In the System Role privileges manager, administrators can now grant a new privilege called Administrator Panel (Users) > System Roles. No System Roles have this privilege by default. An Administrator must always grant the privilege to any System Role. It isn’t possible to grant this privilege to a Course Role.
For administrators: This feature is available for all Learn environments. There are no configurations needed at the administrator level. To improve security, admins should reduce privileges for a REST application if System Administrator privileges were granted previously as a workaround.