Participant Roles (EX)

About Participant Roles

Participant roles are used to control access to the dashboards and org hierarchies. Roles are the best way to manage permissions for large groups of participants. Set up a role and assign multiple participants to it to save time by not assigning permissions one by one.

Types of Dashboards with Roles

Roles are configured per each individual project. The roles described on this page are for Employee Experience projects, including:

• Employee Engagement
• Lifecycle
• 360
• Pulse
• Ad Hoc Employee Research
• Employee Journey Analytics

Any dashboards not listed above are not covered on this support page. While other Qualtrics dashboard products may have similar features included, this support page only details functionality found in the types of dashboards listed above.

Creating a Role

1. Navigate to the Roles section in the Participants tab and select Add new role.
   
2. Give your role a name.
   
   Qtip: You can always later rename your role by clicking on the pencil icon to the right of the role name.
   
3. Select Create.

Role Permissions

There are various permissions that can be enabled or disabled for a role. See:

• Project Permissions
• Dashboard Permissions

You can also change participant permissions on an individual level by clicking on a participant’s name or email. This will then open the participant information window where you can make changes on an individual level.

Permissions Interactions Between Multiple Roles

• • If a participant is assigned to multiple roles, and both those roles restrict data by metadata, then the participant will be given the most lenient access. For example, if one role allows them to see the US office’s data, while the other role allows them to see the Australian office’s data, they will see both the US and Australian offices’ data.
    Qtip: However, if the participant is assigned to multiple roles, and one role restricts data, but another has View All Data set, the data will not be restricted. Qualtrics will apply the more liberal set of data restrictions.
  • If a participant is assigned to two roles, and both those roles restrict data by org hierarchy, then the participant will be given access to both restrictions. For example, if one role allows them to see responses in Unit 1, while the other role allows them to see responses in Unit 2, they will see both Unit 1 and Unit 2’s data.
  • If a participant is assigned to two roles that restrict data, one with restrictions based on metadata and one with restrictions based on org hierarchy, then participant will have access to data matching both the metadata restriction and the org hierarchy restriction. For example, if one role allows them to see the US office’s data, while the other role allows them to see responses in the org hierarchy Unit 1, they will have access to all responses in the US office (metadata restriction) in addition to all responses in Unit 1 (org hierarchy restriction).

Adding & Removing Participants

To add participants to a role, follow the steps below.

1. Select Add / Export.
   
2. Choose to Add participants or Add participants using filters.
3. If you chose Add participants, search for the individual using their name or email address and select the participant from the list. Note that you can select multiple people.
4. If you chose Add participants using filters, you will need to set the conditions under which participants will be added to a role. Your conditions can be based off of metadata, email address, or the org hierarchy manager.
   
   Qtip: You can add multiple conditions by clicking the three dots on the right and selecting Insert condition below.
5. Click Add.

To remove participants from a role, hover over the individual and select the trashcan icon on the right-hand side.

Adding Delegates to Roles

If you have added delegates to your Engagement project, you can use roles to quickly assign your delegates’ permissions in bulk.

1. Navigate to the Roles section.
   
2. Create a new role, or select an existing one.
3. Click Add / Export.
4. Select Add participants using filters.
5. Choose Org Hierarchy Delegate.
   
6. Select the hierarchy from your project that contains the delegates.
7. Click Add. All delegates in the org hierarchy that was selected will be automatically added to the role.
8. Click Add a dashboard and choose the dashboard that the delegates should have access to.
   
9. Enable Restrict data.
   
10. Using the dropdown menus, select Org Hierarchy, then the org hierarchy of interest, and then All results below their delegated position. This will restrict data based on their delegate position in the hierarchy and not their manager or direct report position.

After adding delegates to a role and granting them access to your dashboard, delegates will now have access to the dashboard of interest based on the delegated position in the org hierarchy.

Automatic Role Assignment

Automatic role assignment enables you to automatically add users to roles based on their metadata. If you later change a user’s metadata, their role will also update accordingly.

Automatic role assignment works best when paired with a dashboard user automation, which automatically adds dashboard users to your project from the global directory. Using both features at once allows you to give permissions to your lifecycle dashboards automatically based on changes in your organization.

1. Click Add / Export.
   
2. Select Automatic role assignment.
3. Select a metadata attribute.
   
   Qtip: The list of available metadata fields is based on the metadata of participants in your project. You will only be able to select fields that exist for participants currently in the project. If you’d like to create automatic role assignment before uploading your actual participant list, you will need to add test participants that contain the metadata fields you want to use in the automation.
4. Choose your operator:
   • Equals: This is what you should choose most of the time. This ensures an exact match.
   • In: This option is ideal if your metadata has multiple values, such as those separated by colons (e.g., Seattle::Provo). “In” lets you account for these colon-separated values.
     Example: Below, “Country in Australia” ensures that even users whose Country metadata is something like “Australia::USA” would be included in the role.
     
5. Select the value user metadata must match to be added to this role. You’ll be able to select from a list of existing values or select Enter Custom to type in a new value.
   Example: You are creating a role called Seattle Team. You want all users with an Office of Seattle to be put into this role.
   Qtip: You can type to search values in this field.
6. You can click the dots and then Insert condition below to add another condition to the automatic role assignment.
   
7. If you’d like to add a whole new condition set, select Insert condition set below.
8. To change how multiple conditions are joined, adjust the Any / All dropdown.
   
9. When you’re finished, click Save.

How automatic role assignment works when the metadata for a single user has multiple values

Some metadata have multiple values. For example, if you’re listing an employee’s primary office, they may have multiple if they travel for work. If a metadata attribute has multiple values, it changes how it works with automatic role assignment.

Additional resources for creating autoenrollment conditions

For more information on how to create and combine conditions, see the following resources:

• Condition Sets
• All and Any Sets

Role Options

1. Rename: Rename your role by clicking on the pencil icon to the right of the role name.
2. Delete: Clicking on the trashcan icon next to the role name will delete the selected role and remove it from any participant that it was applied to.
3. Export participants: This will export all of the participants in the selected role to a CSV file. The export will contain each participant’s first name, last name, email, and unique ID.

Searching a Role

If your role contains many participants, you can use the Search bar above a role to search for a participant within the role. You will only be able to search by the participant’s name or email.