You can now restrict a users access to certain profile types at an Organisation level, adding an extra layer of security to your SCR.
How to restrict access by profile type
To restrict a users access to one or more profile types, head to Settings > Organisation Menu > Users. Double-click on a users name to edit their permissions.
Scroll down to the bottom of the permissions list for the user, and toggle on the restrictions for any profile type(s) they do not need access to:
Once you click 'Save Changes', the user will no longer be able to access any profiles within the restricted profile types.
Important: Restricting access by profile type is done only at organisation level. If a user has access to multiple organisations, you will need to edit their user account in each organisations user list.
What will the user see?
Access to profile data is restricted across the portal. In the below examples, I have restricted access to 'Teaching Staff', 'Support Staff', and 'Governors'.
The Dashboard
The dashboard will still show an overview of the system compliance as below:
However as you can see, for widgets such as the 'Profile List', access to restricted profiles will be greyed out, and therefore not accessible.
For widgets such as 'Incidents' - the widget will only show data for any profile types that the user has access to, hiding any profile types included in the restriction.
The Profile List
The profile list and advanced editor will only show the profiles from profile types that a user has access to, even if 'All profile Types' is selected:
Profile Pages
If a user tries to access a restricted profile (EG - via searching for a name) the system will show that a profile exists for this person:
However, if they attempt to access the profile, they will be presented with the following message:
Insights and Reporting
For any default or custom reports, the system will show data only for profiles that the user has access to, even if the report has been set up to include 'All Staff':
