Skip to main content
Role-Based Access Control (RBAC) lets administrators build and assign custom user roles to tailor a user’s GoGuardian Admin and GoGuardian Org Management access to their exact needs. Each role can be granularly customized to allow or restrict access to specific pages and features.

​
Review Common Use Cases

​
Admin RBAC Use Cases

  • Allowing a user to see Smart Alerts without access to filtering options
  • Granting counselors access to only Flagged Activity, the Dashboard, or both
  • Assigning a network administrator access to DNS
  • Allowing teachers to edit certain policies for adding an allowed website, YouTube video, channel, or other content

​
Org Management RBAC Use Cases

  • Granting access to only User Management for adding, editing, and archiving user accounts
  • Assigning User Management access so a user can log in as a teacher and assist with GoGuardian Teacher
  • Allowing access to the Guardian tab for managing parent and guardian accounts and access to the Parent App
  • Granting access to Integrations for managing Clever, ClassLink, Active Directory, and Google integrations

​
Create and Manage Roles

Go to manage.goguardian.com and select Manage Roles in the User Management section. User Management Manage Roles button to access RBAC settings GoGuardian Org Management — Manage Roles RBAC interface showing Management and Admin tabs Admin and Org Management roles are created, managed, and assigned separately. From the Manage Roles interface, click Management to access the Org Management roles page, or click Admin to access the GoGuardian Admin roles page. Each tab opens a separate interface where new roles can be added using the + Add Role button. Existing roles can be updated, deleted, or duplicated using the three-dot menu.
Default roles provided by GoGuardian cannot be edited and appear greyed out.

​
Access Levels

RBAC Manage Roles: User Management and Admin Roles Settings The following access levels are available for both Org Management and Admin roles:
  • No Access
  • View
  • View/Edit
  • Enabled
  • Disabled
Hover over the ⓘ icon next to any permission to learn more about what it controls.

​
Custom Groups Access Levels

GoGuardian Admin’s Custom Groups feature has four permission levels:
  1. View, Full Edit, Create (Super User to Custom Groups): can edit any group without being the owner or co-editor. Allows adding and removing co-editors and adjusting their permissions, adding and removing students (OU access required), changing the group type, applying a policy, renaming a group, deleting any group, and transferring ownership.
  2. View, Co-Edit, Create (suggested for most admins): can only edit groups as the owner or co-editor. Can only delete groups the user owns.
  3. View, Co-Edit: can be added as a co-editor to add or remove students. Cannot create, delete, or duplicate groups, and cannot transfer ownership.
  4. No Access

​
Assign Roles

Once a role is created and configured, it can be assigned to users in User Management individually or in bulk via CSV.

​
Assign a Role to an Individual User

  1. Select Edit next to the user’s name in User Management.
  2. Expand the GoGuardian Org Management or GoGuardian Admin tab.
  3. Select the role from the dropdown.

​
Assign Roles in Bulk via CSV

To assign roles to multiple users at once, add the role name under the appropriate column headers in the CSV file. See the Bulk Update Permissions by CSV article for CSV formatting details.

​
Access Denied Pages

  • Users who attempt to access a page their Org Management RBAC role does not allow will see the Access Denied page.
  • Users who attempt to access a restricted page in Admin RBAC will see the Page Unavailable page.
Access Denied Message Page Unavailable Message
Last modified on July 15, 2026