CLC Hub Admins can now create custom Roles to grant users or groups limited, scoped access to specific areas of the Customer Learning Cloud admin console — without giving them full Hub Admin privileges.
The User or Group must already exist as an internal WorkRamp User or Group before they can be given Role access to the Hub.
Previously, there was no middle ground between full Hub Admin and no admin access at all. If you needed a team member to manage enrolments or run reports, you had to make them a full admin. Roles lets you give people exactly the access they need — and nothing more — keeping your hub secure and your admin team organised.
Four permission types are available:
Permission | What it unlocks |
Contacts | View and manage users, view and create segments |
Enrolments | Manage training assignments (courses, certifications, paths, gradebook) |
Reporting (Basic) | Dashboard, Report Builder, Contacts, and Insights |
Reporting (Advanced) | Everything in Basic, plus Analytics Studio |
Roles are managed from 'Settings' > 'Roles' within a CLC Hub.
How to use it
Creating a role:
Go to 'Settings' > 'Roles' inside your CLC Hub
Select 'Add Role'
Enter a name and tick the permissions you want to grant
Save — the role is now available to assign
Assigning a role to users or groups:
Click the role name to open the role detail page
In the 'Access' section, select 'Assign Users/Groups'
Search for and select the users or groups to add
Users inherit the role's permissions immediately
Permission rules to know:
A role can have multiple permissions (e.g. Contacts + Enrollments)
Reporting (Advanced) automatically includes Reporting (Basic) — you cannot assign Advanced without Basic
Roles can be assigned to individual users or groups, not both in the same assignment
Editing and deleting roles:
Role names and permissions can be updated at any time from the role detail page
Deleting a role removes it from all assigned users and groups; deleted roles are visible on the 'Deleted' tab
Audit trail:
Every change to a role — name edits, permission changes, user/group assignments and removals — is recorded in the Audit Log tab on the role detail page, including who made the change and when