Manage roles at different levels (Space and Groups)

All users can have roles both at the Space and group levels. Let’s explain how roles work in groups with the following use case:

A set of badge applications has been created for a professional development project (in our use case The CodeForge Project). Some of the badges have been designed to recognize the skills of the marketing team, and others to recognize the skills of the development team. The Space admin has created The “Marketing team” and the “Development team” groups and has added the team members to their respective groups (view screenshot below). The Marketing team’s manager will review his team members’ applications, and so will the development team manager. For privacy reasons and to ease the reviewers' work, they must see and review only the badge applications submitted by their teams. This means the marketing team manager should not see applications from the development team members and vice versa.

The solution to this use case requirement is to create a “reviewer” role with the right to Review badge applications and assign this role to only managers at their group level. (Notice that if the reviewer role is given to managers at the Space level, they will have the right to review all the badge applications submitted by all members of the Space without any group-based restrictions.)

If you plan to implement this kind of use case in your Space, remember to give your users roles with minimum rights (e.g., a member role) at the space level and roles with higher permissions at the group level.

The same explication here is visualized in a table: