Beta Feature: To request access, please contact your Account Manager or Support.
CLC Hub Admins can now create custom Roles to grant users or groups limited, scoped access to specific areas of the Customer Learning Cloud admin console — without giving them full Hub Admin privileges.
The User or Group must already exist as an internal WorkRamp User or Group before they can be given Role access to the Hub.
Previously, there was no middle ground between full Hub Admin and no admin access at all. If you needed a team member to manage enrolments or run reports, you had to make them a full admin. Roles lets you give people exactly the access they need — and nothing more — keeping your hub secure and your admin team organised.
Four permission types are available:
Permission | What it unlocks |
Contacts | View and manage users, view and create segments |
Enrolments | Manage training assignments (courses, certifications, paths, gradebook) |
Reporting (Basic) | Dashboard, Report Builder, Contacts, and Insights |
Reporting (Advanced)* | Everything in Basic, plus Analytics Studio |
*Note: Assigning Reporting (Advanced) automatically includes all Reporting (Basic) permissions.
Roles are managed from 'Settings' > 'Roles' within a CLC Hub.
How to use it
Creating a role:
Go to 'Settings' > 'Roles' inside your CLC Hub
Select 'Add Role'
Enter a name and tick the permissions you want to grant
Save — the role is now available to assign
Assigning a role to users or groups:
Click the role name to open the role detail page
In the 'Access' section, select 'Assign Users/Groups'
Search for and select the users or groups to add
Users inherit the role's permissions immediately
Permission rules to know:
A role can have multiple permissions (e.g. Contacts + Enrollments)
Reporting (Advanced) automatically includes Reporting (Basic) — you cannot assign Advanced without Basic
Roles can be assigned to individual users or groups, not both in the same assignment
Editing and deleting roles:
Role names and permissions can be updated at any time from the role detail page
Deleting a role removes it from all assigned users and groups; deleted roles are visible on the 'Deleted' tab
Audit trail:
Every change to a role — name edits, permission changes, user/group assignments and removals — is recorded in the Audit Log tab on the role detail page, including who made the change and when
Note on the Transition Period - ADMINS
Because this is currently a Beta Feature, please keep the following in mind regarding how admins are managed during this transition:
Both tabs are visible: For the time being, you will see both the Admin tab and the new Roles tab in your settings.
Creating new Full Admins: For now, if you need to create any new full admins, please continue to create them the usual way—under the Admin tab.
Future official release: Once we have officially released this feature, all of your existing admins will automatically appear on the Roles page (assigned as Full Admins).

