Permissions - how to create a Role/Permission that only allows Students Assets readonly

@jo.cpa Thank you for submitting your question to our community! 😄

What is the official role of these “return specialists?” I would love to know more about this workflow to help find the best solution for you.  

They handle Student - tech Asset returns only.
So the permissions seems to only give Read to all Assets, including Staff.  We don’t want that.  We need it to be more granular.
 

What questions do you have?

@jo.cpa Do you still have the original permissions? 

I know that currently, with the Enhanced Permissions, we can only add the location filter, not the role. 

@Kathryn Carter I think we have Enhanced Permissions.  How can I check that?  I don’t see anything on the Admin>Permissions area or Site Options that specifies.

But it sounds like what you’re saying is that the Enhanced Permissions doesn’t really help in what we need… Student asset check in only

@jo.cpa I reread over your original question. You are correct; you are only able to filter by location at this time. This would be a great enhancement to our permissions that you can add to our Idea Exchange here: https://community.incidentiq.com/ideas

Would it really be Location?
I think we only want this Permission to be able to return assets that belong to someone in the Students Role.  We don’t care about the location.
So suggest that?  And wait for votes and...?  😯

Schools have a large number of returns at the end of the year.  To allow the Return permission to be able to return anything checked out to anyone seems excessive and poor controls/accountability… thereby requiring additional steps. Not ideal and I’m disappointed that iiQ has it implemented in this manner.

IT prefers PoLP.  Seems like iiQ should try to use it.

@jo.cpa I will pass this information along to our Product team.