Monday, January 28, 2013

Switching Admin accounts to manager role...

I am getting ready to upgrade one of my moodle sites from 2.3 to 2.4.  As a courtesy, I will be sending out an email to the site admin. alerting them of my intention and that I will be putting their site in maintenance mode.  I was reminded that this site (instance) has many administrator accounts.

As a rule, multiple administrator accounts is a bad idea.  

The admin role should be assigned with great caution.  I am sure this site has multiple admins. because the users did not understand the role and its context (once upon a time).  I am making a decision to move all of the accounts assigned to administrator to manager.

Moodle has many roles that can be applied, greatly reducing the need to assign users the admin. role.

This is a prudent move and is the right thing to do.  This post convinced me.  And I quote

" The Manager role therefore allows a site Administrator to give very powerful roles to others who are assigned a Manager role, but without having to give them a full Administrator role. "

Note the verbiage, a single Site Administrator!

I will assigning the accounts site wide manager permission.

The worse thing that could happen is one of the users emailing me asking about some permission they used to have, which I doubt will happen!

I also used the Site logs to query the amount of activity the accounts have been up to over the past 6 months.

Moral of the story?

Be prudent.  Reduce the risk of hacking on the moodle instance by reducing the number of accounts assigned the administrator account.


No comments:

Post a Comment