Roles: Users, Admins, Experimenters, Banking‐Administrators - wiso-forschungslabor/hroot-documentation GitHub Wiki
Users in HROOT are categorized into four roles Users, Experimenters, Administrators (or Admins), Banking-Administrators.
Table of Contents
1. Users
Users are typically participants in experiments. They register via the signup page, verify their email address, and await study invitations. Once invited, they can view experiment details, select sessions, manage their profile data, and provide payment preferences (if required by the subject pool).
User Homepage:
2. Experimenters
Experimenters have targeted permissions scoped to their assigned experiments:
- Manage sessions, send invitations/messages to registered participants, conduct session admission (check-in), and complete session lab reports.
- They do not have access to global system settings, participant banking data, or unassigned experiments.
Experimenter Homepage:
3. Administrators
Administrators manage day-to-day lab and experiment operations and have broad operational access:
- User & Pool Management: Browse the participant database, search/filter users, activate or block accounts, manage subject pools, and export participant data.
- Experiment Management: Create and configure experiments, manage procedures, treatments, session groups, and assign experimenters.
- Task Management (Staff Tasks): Create tasks and delegate them to any staff member. Admins can view all tasks across the system, and can edit, update, or delete tasks they created or that are assigned to them.
- Staff Availabilities: Manage their own working times, weekly recurring slots, and availability exceptions.
- General Configuration: Manage locations, default email templates, custom field definitions, and duplicate check rules.
Administrator Homepage:
4. Banking-Administrators
Banking-Administrators hold the highest privilege level in HROOT. In addition to all standard administrator capabilities, they have exclusive access to financial governance, sensitive bank data, and comprehensive team management:
-
Sensitive Bank Data & Privacy Protection:
-
Participant Bank Credentials: Only Banking-Admins can view and edit sensitive bank details (
IBAN,BIC,Bank Name,Account Holder) in participant profiles. These fields are strictly hidden from standard Admins and Experimenters. -
SEPA & Banking Exports: Generate SEPA XML transfer files and manage bank payout requests.
-
-
Kimai Integration Management:
- Exclusive administrative access to Site Settings -> Kimai Synchronization.
- Link experiments to Kimai projects, map staff members to Kimai user profiles, and configure expense category mappings.
-
Team-Wide Staff Governance:
- Team Availabilities: View and edit the working hours, weekly recurring slots, and absence exceptions of all staff members (standard Admins can only edit their own).
- Full Task Governance: Edit, reassign, or delete any task on the system (standard Admins can view all tasks, but only edit/delete tasks assigned to or created by them).
- Admin Account Protection: Standard Admins cannot edit or demote Banking-Admin accounts.
Banking-Administrator Homepage:
