Permissions

This document lists permissions that can be granted to account-, course-, and cohort-level roles in Canvas.

For Account-level roles only

Key	Permission
access_oak	IgniteAI Agent - Admins
become_user	Users - act as
import_sis	SIS Data - import
manage_account_assignment_presets	Assignment Presets - manage account
manage_account_memberships	Admins - add / remove
manage_account_settings	Account-level settings - manage
manage_alerts	Global Announcements - add / edit / delete
manage_catalog	Catalog - manage
manage_data_services	Data Services - manage
manage_developer_keys	Developer Keys - manage
manage_dsr_requests	Users - create DSR export
manage_feature_flags	Feature Options - enable / disable
manage_frozen_assignments	Manage (edit / delete) frozen assignments
manage_impact	Impact - Manage
manage_lti_registrations	LTI Registrations - Manage
manage_master_courses	Blueprint Courses - add / edit / associate / delete
manage_mfa_settings	Account - Multi-Factor Authentication
manage_program_enrollments	Program Enrollments - manage
manage_role_overrides	Permissions - manage
manage_sis	SIS Data - manage
manage_skill_taxonomy	Skills Taxonomy - manage
manage_storage_quotas	Storage Quotas - manage
manage_user_logins	Users - manage login details
manage_user_observers	Users - manage observers
manage_users_in_bulk	Bulk actions - people page
moderate_user_content	Users - moderate content
new_quizzes_view_ip_address	New Quizzes - view IP address
read_course_content	Course Content - view
read_course_list	Courses - view list
reset_any_mfa	Reset Multi-Factor Authentication
undelete_courses	Courses - undelete
view_admin_analytics	Admin Analytics - view and export data
view_analytics_hub	Analytics Hub
view_course_changes	Courses - view change logs
view_feature_flags	Feature Options - view
view_feature_rollouts	Feature Rollouts - view
view_grade_changes	Grades - view change logs
view_notifications	Notifications - view
view_quiz_answer_audits	Quizzes - view submission log
view_statistics	Statistics - view

Authentication Providers

Key	Permission
manage_authentication_provider	Authentication Providers - manage
read_authentication_provider	Authentication Providers - read

Automation Rules

Key	Permission
manage_rules_add	Automation Rules - add
manage_rules_delete	Automation Rules - delete
manage_rules_edit	Automation Rules - edit
manage_rules_view	Automation Rules - view

Cohorts - Manage

Key	Permission
manage_cohorts_enrollment_scopes	Cohorts - manage allowed content

Intelligent Insights

Key	Permission
manage_advanced_analytics_configuration	Manage Advanced Analytics Configuration
manage_ask_questions_analytics_context	Ask Your Data's Context Library - modify
view_accessibility_insights	Accessibility Analytics
view_analytics_dashboard	Analytics Dashboard
view_ask_questions_analytics	Ask Your Data - use
view_ask_questions_pinboards	Pinboards - view
view_course_readiness	Course Readiness
view_rsi_report	Teacher Interaction Analytics
view_students_in_need	Students in Need of Attention
view_title_iv_financial_aid_report	Title IV Financial Aid Report

Learner Dashboards

Key	Permission
manage_learner_dashboards_add	Learner Dashboards - add
manage_learner_dashboards_delete	Learner Dashboards - delete
manage_learner_dashboards_edit	Learner Dashboards - edit
manage_learner_dashboards_view	Learner Dashboards - view

Manage Account Calendars

Key	Permission
manage_account_calendar_events	Account Calendars - add / edit / delete events
manage_account_calendar_visibility	Account Calendars - change visibility

Manage Course Templates

Key	Permission
add_course_template	Course Templates - create
delete_course_template	Course Templates - delete
edit_course_template	Course Templates - edit

Manage Courses

Key	Permission
manage_courses_add	Courses - add
manage_courses_admin	Courses - manage / update

Manage Institutional Tags

Key	Permission
manage_institutional_tags_create	Institutional Tags - create
manage_institutional_tags_edit	Institutional Tags - edit
manage_institutional_tags_view	Institutional Tags - view

Users - Manage Access Tokens

Key	Permission
create_access_tokens	Access Tokens - create / update
delete_access_tokens	Access Tokens - delete
view_user_generated_access_tokens	Manually Generated Access Tokens - view

Users - Temporary Enrollments

Key	Permission
temporary_enrollments_add	Temporary Enrollments - add
temporary_enrollments_delete	Temporary Enrollments - delete
temporary_enrollments_edit	Temporary Enrollments - edit

For both Account-level and Course-level roles

Note: Applicable enrollment types for course-level roles are given in brackets: S = student, T = teacher (instructor), A = TA, D = designer, O = observer. Lower-case letters indicate permissions that are off by default. A missing letter indicates the permission cannot be enabled for the role or any derived custom roles.

Key	Available To	Permission
access_oak_teacher	TaD	IgniteAI Agent - Faculty & Support
allow_course_admin_actions	Tad	Users - allow administrative actions in courses
apply_default_discussion_options	T	Discussions - apply default options
block_editor_global_template_editor	t d	Block Editor Global Templates - edit
block_editor_template_editor	t d	Block Editor Templates - edit
create_collaborations	STADo	Student Collaborations - create
create_conferences	STADo	Web Conferences - create
create_forum	STADo	Discussions - create
edit_discussion_anonymity	T	Discussions - edit anonymous discussion
edit_discussion_options	T	Discussions - edit options
edit_discussion_views	T	Discussions - edit view
generate_observer_pairing_code	tado	Users - generate observer pairing codes for students
import_outcomes	TaDo	Learning Outcomes - import
manage_account_banks	t d	Item Banks - manage account
manage_calendar	sTADo	Course Calendar - add / edit / delete
manage_course_details	TaD	Manage Course Details
manage_course_feature_options	TaD	Manage Course Feature Options
manage_course_navigation	TaD	Manage Course Navigation
manage_course_visibility	TAD	Courses - change visibility
manage_grades	TA	Grades - edit
manage_interaction_alerts	Ta	Alerts - add / edit / delete
manage_nav_menu_links	tad	Custom Links - manage
manage_outcomes	sTaDo	Learning Outcomes - add / edit / delete
manage_proficiency_calculations	t d	Outcome Proficiency Calculations - add / edit
manage_proficiency_scales	t d	Outcome Mastery Scales - add / edit
manage_rubrics	TAD	Rubrics - add / edit / delete
manage_students	TAD	Users - manage students in courses
moderate_forum	sTADo	Discussions - moderate
new_quizzes_multiple_session_detection	t	New Quizzes - view multi session information
post_to_forum	STADo	Discussions - post
proxy_assignment_submission	ta	Submission - Submit on behalf of student
read_announcements	STADO	Announcements - view
read_email_addresses	sTAdo	Users - view primary email address
read_forum	STADO	Discussions - view
read_question_banks	TADo	Question banks - view and link
read_reports	TAD	Reports - manage
read_roster	STADo	Users - view list
read_sis	sTad	SIS Data - read
select_final_grade	TA	Grades - select final grade for moderation
send_messages	STADo	Conversations - send messages to individual course members
send_messages_all	sTADo	Conversations - send messages to entire class
share_banks_with_subaccounts	tad	Item Banks - share with subaccounts
view_all_grades	TAd	Grades - view all grades
view_audit_trail	t	Grades - view audit trail
view_group_pages	sTADo	Groups - view all student groups
view_students_in_need_in_course	Ta	Intelligent Insights - Students in Need of Attention - Course Level
view_user_logins	TA	Users - view login IDs

Manage Assignments and Quizzes

Key	Available To	Permission
manage_assignments_add	TADo	Assignments and Quizzes - add
manage_assignments_delete	TADo	Assignments and Quizzes - delete
manage_assignments_edit	TADo	Assignments and Quizzes - edit

Manage Course Content

Key	Available To	Permission
manage_course_content_add	TADo	Course Content - add
manage_course_content_delete	TADo	Course Content - delete
manage_course_content_edit	TADo	Course Content - edit

Manage Course Files

Key	Available To	Permission
manage_files_add	TADo	Course Files - add
manage_files_delete	TADo	Course Files - delete
manage_files_edit	TADo	Course Files - edit

Manage Course Sections

Key	Available To	Permission
manage_sections_add	TaD	Course Sections - add
manage_sections_delete	TaD	Course Sections - delete
manage_sections_edit	TaD	Course Sections - edit

Manage Courses

Key	Available To	Permission
manage_courses_conclude	TaD	Courses - conclude
manage_courses_delete	t d	Courses - delete
manage_courses_publish	TaD	Courses - publish
manage_courses_reset	t d	Courses - reset
view_archived_courses	t d	Courses - view archived

Manage Differentiation Tags

Key	Available To	Permission
manage_tags_add	Tad	Differentiation Tags - add
manage_tags_delete	Tad	Differentiation Tags - delete
manage_tags_manage	Tad	Differentiation Tags - manage

Manage Groups

Key	Available To	Permission
manage_groups_add	TAD	Groups - add
manage_groups_delete	TAD	Groups - delete
manage_groups_manage	TAD	Groups - manage

Manage LTI

Key	Available To	Permission
manage_lti_add	TAD	LTI - add
manage_lti_delete	TAD	LTI - delete
manage_lti_edit	TAD	LTI - edit

Manage Pages

Key	Available To	Permission
manage_wiki_create	TADo	Pages - create
manage_wiki_delete	TADo	Pages - delete
manage_wiki_update	TADo	Pages - update

Users - Designers

Key	Available To	Permission
add_designer_to_course	Tad	Designers - add
remove_designer_from_course	Tad	Designers - remove

Users - Observers

Key	Available To	Permission
add_observer_to_course	TAD	Observers - add
remove_observer_from_course	TAD	Observers - remove

Users - Students

Key	Available To	Permission
add_student_to_course	TAD	Students - add
remove_student_from_course	TAD	Students - remove

Users - TAs

Key	Available To	Permission
add_ta_to_course	Tad	TAs - add
remove_ta_from_course	Tad	TAs - remove

Users - Teachers

Key	Available To	Permission
add_teacher_to_course	Tad	Teachers - add
remove_teacher_from_course	Tad	Teachers - remove

For Cohort-level roles

Note: Cohort-level roles are built on the CohortLeader base type and only apply when the root account has institutional cohorts enabled. A leader's permissions reach the cohort they lead and its sub-cohorts, never cohorts above it. Permissions marked account, cohort can also be granted to account-level roles.

Key	Available To	Permission
manage_cohorts_view_analytics	account, cohort	Cohorts - view analytics

Cohorts - Manage

Key	Available To	Permission
manage_cohorts_create	account, cohort	Cohorts - create
manage_cohorts_edit	account, cohort	Cohorts - edit
manage_cohorts_remove	account, cohort	Cohorts - remove
manage_cohorts_view	account, cohort	Cohorts - view

Cohorts - Manage Enrollment

Key	Available To	Permission
manage_cohorts_enroll_in_collection	cohort	Cohorts - enroll members in collections
manage_cohorts_enroll_in_course	cohort	Cohorts - enroll members in courses
manage_cohorts_enroll_in_program	cohort	Cohorts - enroll members in programs

Cohorts - Manage Membership

Key	Available To	Permission
manage_cohorts_add_leaders	account, cohort	Cohorts - add leaders
manage_cohorts_add_members	account, cohort	Cohorts - add members
manage_cohorts_remove_leaders	account, cohort	Cohorts - remove leaders
manage_cohorts_remove_members	account, cohort	Cohorts - remove members