[ARCHIVED] Vendor Roles?

[John_Lowe]

What sort of roles do people use for 3rd-party-vendor specific accounts that create top-level data access tokens for publishers?  For example, most publishers need to do certain things like see the list of users, manage assignments and quizzes, manage content, and edit grades but shouldn't have access to things like becoming other users or creating new courses.

Below are two of my standard roles that I use for third-party vendors depending on what they need to access:

Vendor (read/write) 

•    Read SIS data
•    View statistics
•    View the list of courses
•    Add, edit and delete events on the course calendar
•    Edit grades
•    Manage (add / edit / delete) assignments and quizzes
•    Manage (add / edit / delete) course files
•    Manage all other course content
•    Manage learning outcomes
•    Manage wiki (add / edit / delete pages)
•    See the list of users
•    View all grades
•    View all students' submissions and make comments on them
•    View course content
•    View the group pages of all student groups
•    View usage reports for the course

Vendor (read-only)

•    Read SIS data
•    View statistics
•    View the list of courses
•    See the list of users
•    View course content
•    View discussions
•    View usage reports for the course

[awilliams]

I am militant about not giving "top-level data access tokens" to third-parties. For Pearson - MyLabsandMastering and MyFoundationsLabs, McGraw-Hill - MHCampus, and Macmillan - Launchpad, we have accomplished all integration needs with instructor level tokens.