Group Security Permissions Setup

PowerSchool users and staff members are assigned to groups to simplify the process of assigning and modifying permissions. Though users have the default permissions of the user group to which they belong, you can modify these permissions per user. For more information about modifying individuals' permissions, see Edit a Staff Member Security Settings.

Edit Security Permissions by Group

Edit the permissions of staff members and PowerSchool users.

1. Navigate to the List Users by Group page. 
2. Click the name of the user in the User Name column. 
3. Edit information as needed. For field descriptions, refer to Staff Security Settings.
4. Click Submit. 

Add Security Groups

Based on your district's needs, you can add up to 500 security groups. Adding security groups in small batches allows you to prefix the security group with a meaningful name that can help you to sort and manage security groups more easily.

1. Navigate to the Security Groups page. 
2. Click Add Groups. 

3. Use the following table to enter information in the fields:

   Field	Description
   Current Number of Security Groups	The current number of security groups appears. This field is read-only.
   Number of Groups to Add	Enter the new number of security groups. The new total number of security groups appears. The minimum value that you can enter is 1. The maximum value you can enter is 500, which includes the current number of groups. For example, if the current number of groups is 100, the maximum value you can enter is 400. This field is required.
   Prefix Group Names With	Any groups that are created will use this prefix, followed by the number of the group. For example, if the current number of security groups is 50 and the number of security groups is increased to 55, then "Group 51, Group 52, Group 53, Group 54, Group 55" are created. Do one of the following Use the default prefix setting of Group [space]. Replace the default prefix setting with your own prefix.
   Group Name Preview	Group names appears based on the number of groups you added and the prefix you entered. Confirm that the group name is correct prior to submitting.

4. Click Submit. 

Edit Security Groups

1. Navigate to the Security Groups page. 
2. To narrow the list of groups, enter one or more search terms in the Filter field. Otherwise, leave blank.
3. Click a name in the Group Name column. 

4. Enter information as needed:

   Field	Description
   Group Number	The number of the group appears. PowerSchool supports up to 500 security groups. For more information, refer to the Add Security Groups section.
   Group Name	Edit the name of the group.
   Default Access Level	Choose a level of permission used as the default permissions for users in this group: No Access: No access to the page. Read Only: Can read but not modify the information on the page. Edit: Can read and modify information on the page.
   Page Level Permissions	For Overridden Page Permissions, refer to the View/Edit Overridden Page Permissions section. For Configure Page Permissions, refer to the Configure Security Permissions by Group section.
   Can Modify Schedules	Choose a level of permission for modifying schedules: Yes, in any year No, not at all Only for [school years]
   PowerScheduler Access	Select the checkbox if users in this group can use the master scheduler features.
   Language Translator/Customizer	Select the checkbox if users in this group can use the language translator feature.
   Report Queue Priority	Select the report queue priority level for this group. The report queue priority determines which reports run first, based on the user who submitted the report request. For example, a group with the priority level of 10 is the second-highest level of priority for running reports. Only groups with the level of zero would have higher priority.
   Quick Search Configuration	Configure what shows in the Quick Search results for the group. Refer to Quick Search for more information.
   Accessible Log Types	Select the checkbox next to each log type that you want to be accessible to users in this group. Click Check All to select all checkboxes. Click Uncheck All to deselect all checkboxes. The Check All and Uncheck All buttons only appear if there are multiple log type checkboxes.
   Accessible Incident Types	Select the checkbox next to each incident type that you want accessible to users in this group. Set up Incident Types at the district level. For more information, refer to Incident Types.
   Health and Immunization	Indicate the level of permission for each tab on the District Setup Health page: No Access: No access to the page. Read Only: Can read but not modify the information on the page. Read/Modify: Can read and modify information on the page. Read/Modify/Delete: Can read, modify, and delete information on the page. Security for the setup Health Management pages is controlled through page-level permissions. For more information, see the Health Management Permissions section in Page-Level Permissions.
   Fitness	Choose from the drop-down list to indicate the security permissions for users in this group. No Access: No access to student fitness records. Read Only: Can read but not modify student fitness records. Read/Modify: Can read and modify student fitness records. Read/Modify/Delete: Can read, modify, and delete student fitness records.
   Accessible Student Screens	Select the checkbox next to each student screen that you want to be accessible to users in this group. Click Check All to select all checkboxes. Click Uncheck All to deselect all checkboxes. The Check All and Uncheck All buttons only appear if there are multiple student screen checkboxes. Only the student screen checkboxes selected here appear as links in the main menu. If a user group is denied all access to the student screens, the system displays a message indicating access was denied. If you disable access to a student screen that a user has already set as his or her default screen, the system generates an error when the user navigates to the student area. They can remedy this by selecting a new default screen using the Personalize function. If a security group was able to access certain student screens prior to this software update, it will still be able to do so.

5. Click Done. 

Copy Security Permissions

Use the Copy Security Permissions function to copy page permissions settings and group security settings from one group to another.

1. Navigate to the Security Groups page. 
2. Click a name in the Group Name column. 
3. Click Copy Security Permissions. 

4. Use the following table to enter information in the From Group section:

   Field	Description
   From [Name] Group	Indicates the group you selected on the previous page and the level of access.
   Group Security Settings	Select the checkbox to copy group security settings. Group security settings are set using the Edit Group page. This checkbox may be selected in addition to the Page Permissions Settings checkbox.
   Page Permissions Settings	Select the checkbox to copy page permission settings. Page permission settings are set using the Access Privileges page on individual pages. This checkbox may be selected in addition to the Group Security Settings checkbox.

5. Use the following table to enter information in the To Groups section:

   Field	Description
   Filter	To narrow the list of groups, begin entering the name of the group for which you want to copy security settings to.
   Select All	Do one of the following: Select the checkbox to select all groups displayed. Deselect the checkbox to deselect all groups displayed. This setting works with the filter so that only visible (non-filtered) groups are set.
   [Individual Group]	The number, name, and default access level of each group appears. Select the checkbox of each group that you want to copy the security settings to. Click a column heading to sort in ascending order. Click again to sort in descending order.

6. Click Copy Settings.
   If copying page permissions where the From Group has an access level of None or View-Only and all groups in PowerSchool are selected as To Groups, the following message appears: "You are attempting to copy a value of [View Only or No Access] to all groups. You will not be able to proceed until at least one group retains access." appears. Click OK.
7. Review the From Group, To Group information.
   Copying security settings or page permissions will replace those settings of the groups you copy to.
8. If accurate, click Submit. 
   If copying page permissions would result in one or more pages being locked out, the following message appears, "Some page permissions could not be copied because at least one user needs full access to these pages. Click here to modify the permissions to these pages manually." Click here. The Page Permissions that can't be Copied pop-up appears. Click the page link to adjust the page permissions for that page. The Access Privileges page appears in a separate tab on your browser. Edit the information as needed. When you click Submit, the tab on your browser closes. Repeat for each page for which you want to adjust the page permissions. When done, close Page Permissions that Can't be Copied.

View/Edit Overridden Page Permissions

Use the Overridden Page Permissions function to view and edit pages that have a permission set to a specific level instead of the Group Access Level.

1. On the start page, choose System under Setup in the main menu. 
2. Under Security, click Groups. 
3. To narrow the list of groups, enter one of more search terms in the Filter field. Otherwise, leave blank.
4. Click a name in the Group Name column.
5. Click Overridden Page Permissions.

6. Use the following table to enter information in the From Group section:

   Field	Description
   Filter	To locate a page, begin typing. The list of pages narrows as you enter more text.
   Set All Pages To	To set all pages (on the Overridden Page Permissions page) to a specific permission level, choose one of the following from the pop-up menu: Group Default: Level determined as the group default on the Edit Group page for each group. For more information, refer to the Edit Security Groups section. No Access: No access to the page. Read Only: Can read but not modify the information on the page. Edit: Can read and modify information on the page. To apply, click Submit.
   [Page]	The name of the page that has a permission set to a specific level. To define user group access: Click the name of the page. Update the level of access for each group as needed. Click Submit. A confirmation message appears. Close the Access Privileges page.
   [Permission]	The specific permission level the page is set to. To edit, click the permission and choose one of the following: Group Default: Level determined as the group default on the Edit Group page for each group. For more information, refer to the Edit Security Groups section. No Access: No access to the page. Read Only: Can read but not modify the information on the page. Edit: Can read and modify information on the page. Once a page has been modified, the line item appears gray and a message displays indicating you have unsaved changes.

7. Click Submit. 
   When visiting these pages they may only partially render. These links are only to be used to alter page-level permissions, and not for entering data.

Configure Page Permissions by Group

1. Navigate to the Security Groups page.
2. Click on the name of the group you want to edit permissions for.
3. Click Configure Page Permissions.
4. Find the page you want to edit permissions for. The filters and search narrow the list of pages shown.
5. Change the permissions for any user group. The levels of access are the same as the Enable Page Permissions method:
   1. Group default: Level determined as the group default on the Edit Group page. For more information, refer to the Edit Security Groups section.
   2. No Access: No access to the page.
   3. Read Only: Can read but not modify the information on the page.
   4. Edit: Can read and modify information on the page.
6. Unsaved changes appear with an asterisk (*) next to them.
7. Click Save.