Creating, allocating and managing user permissions

The digital services that users can access with HMPPS Auth, and what they can do in those services, is determined by:

Which roles have been allocated to their account(s)
Which groups they belong to

Groups and Roles

Roles and groups provide permission to access services and determine what a user can do in a service.

Roles: can be allocated to all types of users
Groups: only external users can be added to and manage groups

To provide access to your service it will need at least one role even if the service also has groups.

Roles are a way to assign permissions to your users. For example, your service might have a role that allows users to suggest changes to an offender’s record and another role to approve those changes.

Different types of roles can be allocated to different types of account:

DPS roles can be allocated to DPS users - people who sign in with a NOMIS username and password
Probation users (people who sign in with a DELIUS username and password) will automatically have the probation role.
External account users can be allocated to external users.

Before creating roles for your service you should consider:

Who are your users and how will they access your service?
Do they have a NOMIS and/or a Delius account?
Will your service be used by people outside of Ministry of Justice? For example, the police or external training providers.

DPS (NOMIS) user roles

Content coming soon.
How to create a role, how the roles will be allocated to users

External user roles

Content coming soon.
How to create a role, how the roles will be allocated to users

Using the Delius probation role

Content coming soon.

Giving your users multiple roles

You might need to provide some of your users with more than one role in your service. For example, a manager may need to both suggest and approve decisions in a service.

Users can be allocated as many roles as they need but you should consider how your users will switch between roles in your service. For example, the Digital Categorisation service allows users with multiple roles to select which role they want to use from a menu at the top of the page.

_{This page was last reviewed on 04-Sep-2024, next review will be on 04-Dec-2024.}