admin/institutions et al.: Add inst. support admin role

New in Mahara 22.04: Support administrators can be
set up on the institution level for a more
granular giving of permissions (Bug #1953411).

source/administration/config_site.rst

@@ -136,13 +136,14 @@ You can use Mahara with multiple institutions and separate them for administrati
    .. note::
       This setting gives institutions in a formal learning setting the possibility to prevent accidental account deletion by people before portfolios are archived if required.
 
-#. **Access reports for staff**: :index:`If <single:Configure site; Staff report access>` set to 'Yes', site and institution staff will have :ref:`access to people reports <People_reports>`. The following reports are available to them:
+#. **Access reports for staff and support administrators**: :index:`If <single:Configure site; Staff report access>` set to 'Yes', site and institution staff and |new in Mahara 22.04| institution support administrators will have :ref:`access to people reports <People_reports>`. The following reports are available to them:
 
+   * Account details
+   * Legal consent
    * Masquerading sessions (if logging of these is turned on)
    * Portfolio access
-   * Account details
 
-#. **All reports for institution staff**: If set to 'Yes', institution staff will have access to all reports in their institutions. This is normally restricted to administrators and site staff.
+#. **All reports for institution staff and support administrators**: If set to 'Yes', institution staff and |new in Mahara 22.04| support administrators will have access to all reports in their institutions. This is normally restricted to site and institution administrators and site staff.
 
 .. index:: Default account lifetime, Default account inactivity time, Session lifetime, Warning time for inactivity / expiry
    pair: Administration; Account settings

source/administration/institutions.rst

@@ -23,7 +23,7 @@ In *Administration menu → Institutions → Settings* you can set up as many in
 Institutions don't need to be separate organisations. You can set up Mahara institutions for different parts of your organisation to use different themes, have different default settings, or authentication methods.
 
 .. note::
-   Even if you use Mahara with one organisation only and do not want to distinguish different departments within your organisation, we recommend you set up at least one institution and not use 'No institution'. By setting up that institution, you will have two more roles available: institution staff and institution administrator.
+   Even if you use Mahara with one organisation only and do not want to distinguish different departments within your organisation, we recommend you set up at least one institution and not use 'No institution'. By setting up that institution, you will have three more roles available: institution staff, |new in Mahara 22.04| institution support administrator, and institution administrator.
 
    You can create institution administrator accounts, which are less powerful than site administrator accounts. By having institution administrators, you can allow them to take care of account and group creation etc. without giving them full powers over the site preventing that too many people can make site changes.
 
@@ -1100,6 +1100,36 @@ You can give institution members staff rights in an institution in which they ar
 #. Then click the *Left-arrow* button |left-arrow|, and they are removed from the list.
 #. When you have all the members you wish to have as staff in the institution, click the *Submit* button.
 
+.. index::
+   pair: Institution; Institution support administrator
+
+.. _institution_support_admin:
+
+|new in Mahara 22.04| Institution support administrators
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+*Administration menu → Institutions → Support administrators*
+
+:index:`You <single: New in Mahara 22.04; Institution support administrator>` can give institution members support administrator permissions in an institution in which they are members. This role includes the institution staff permissions and also allows the masquerading as of institution members and staff. It could be used for hotline support at an institution where you may not wish to give full institution administrator permissions to certain people, yet still make it possible for them to masquerade as other institution members and troubleshoot issues.
+
+This page allows you to do that in bulk for many members at once.
+
+.. seealso::
+   You can also give support administrator rights on the :ref:`person's account settings page <site_account_settings>`.
+
+.. figure:: /images/administration/institution_support_administrator.*
+   :alt: Give members institution support administrator rights
+
+   Give members institution support administrator rights.
+
+#. **Institution**: Choose the institution from the drop-down menu for which want to give support administrator permissions to members. If there is only one institution that you can administer, its name will be displayed without the drop-down menu.
+#. **Search for a person**: You can search for people in the *Search* box if there are too many names listed.
+#. **Institution members**: Select the institution members who shall get support administrator permissions.
+#. Add the people to the list **Institution support administrator** by clicking the *Right-arrow* button |right-arrow|.
+#. If you put a person into the institution support administrator list by accident or want to remove existing support administrators and return them to normal membership status, select them.
+#. Then click the *Left-arrow* button |left-arrow|, and they are removed from the list.
+#. When you have all the members you wish to have as support administrators in the institution, click the *Submit* button.
+
 .. index::
    pair: Institution; Institution administrator
 

source/administration/users.rst

@@ -484,11 +484,15 @@ You can view and change settings regarding a person's membership in institutions
       The default setting is that the date is not specified. You can set an automatic institution membership expiry date for all members in your institution in the :ref:`settings for your institution <add_institution>`.
 
 #. **ID number**: Provide an optional identifier for this person in this institution. This field is not editable by the institution member.
-#. **Account roles**: While account roles have existed in Mahara for a long time, it is now possible to extend them. All account roles a person has in an institution can be set here. The default built-in roles are:
+#. **Account roles**: It is possible to extend account roles. All account roles a person has in an institution context can be set here. The default built-in roles are:
 
-   * **Institution staff**: Change the switch to 'Yes' if you want to give this member staff rights in this institution. This will allow the them to create controlled groups for example.
-   * **Institution administrator**: Change the switch to 'Yes' if you want to make this member an administrator of this institution.
+   * Institution staff
+   * |new in Mahara 22.04| Institution support administrator
+   * Institution administrator
 
+#. **Institution staff**: Change the switch to 'Yes' if you want to give this member staff permissions in this institution. This will allow them to create controlled groups for example.
+#. |new in Mahara 22.04| **Institution support administrator**: Change the switch to 'Yes' if this institution member shall receive the institution support administrator permissions in this particular institution.
+#. **Institution administrator**: Change the switch to 'Yes' if you want to make this member an administrator of this institution.
 #. Click the *Update* button to save your changes.
 #. Click the *Remove from this institution* button to disassociate this person from this institution. The account will not be deleted. The person will only not be associated with this institution any more.
 

source/new.rst

@@ -9,13 +9,6 @@ Mahara is being improved from version to version. On this page, you see the **hi
 
 You can see a `list of all new features on Launchpad <https://bugs.launchpad.net/mahara/+bugs?field.searchtext=&orderby=-importance&field.status%3Alist=FIXCOMMITTED&field.status%3Alist=FIXRELEASED&field.milestone%3Alist=93805&field.tag=newfeature&&search=Search>`_ or check out the features via the |new in Mahara 22.04| 'New in Mahara 22.04' `index entries <genindex.html#N>`_.
 
-Résumé changes
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-|resume| Education and employment histories are now separate menu items to be able to deal better with dragging and dropping files.
-
-You can attach files on an education or employment history item or an achievement either directly from your Mahara files area or by uploading a file from your device.
-
 Install languages in the site administration
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
@@ -25,3 +18,15 @@ Set up portfolio completion in group collections
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 |completion| If a group is created in an institution that allows the use of the portfolio completion functionality, you can :ref:`set up group portfolio templates <group_portfolios>` that add this page. Learners can then copy the template and have the page ready to go on their personal portfolios.
+
+Institution support administrator role
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+|support admin| People providing support for an institution, e.g. helpdesk or hotline support, can now receive the :ref:`'Institution support administrator' role <institution_support_admin>`, which includes all permissions from the 'Institution staff' role and the possibility to masquerade as a regular institution member and as institution staff.
+
+Résumé changes
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+|resume| Education and employment histories are now separate menu items to be able to deal better with dragging and dropping files.
+
+You can attach files on an education or employment history item or an achievement either directly from your Mahara files area or by uploading a file from your device.

source/shortcuts.rstext

@@ -541,3 +541,7 @@
 .. |completion| raw:: html
 
    <i class="fas fa-check-cirle fa-3x fa-pull-left new_icon" aria-hidden="true"></i>
+
+.. |support admin| raw:: html
+
+   <i class="fas fa-headset fa-3x fa-pull-left new_icon" aria-hidden="true"></i>