Permission, roles and context

Moodle has a complex permission, role and context system, we all know it.  With capacity and choice comes confusion and ambiquity.

I have a content server that is set up like this:



I had set up one account called vendor in a site wide manager role to share among the three vendors.  After some analysis we realized we did not want each vendor to see the content of the others courses.  I ended up created a separate account for each of the 3 vendors and assigned it the Manager role NOT at the SYSTEM LEVEL but at the CATEGORY LEVEL.  Now, each vendor can access the site, but only have the permissions of the Manager role in their respective Category (and all sub-categories).  These docs helped a lot.

I first had to enable site wide Category role assigning.  Admin | Plugins | Enrolments | Manage enrol plugins
then had to activate it.  When I clicked on the settings, I was told to not use this feature and to instead use cohort synchronization (maybe next time).

Once this was enabled, I browsed to a category, clicked on Assign Roles and enrolled the appropriate account in the Manager role.