Nexus permissions

This guide follows Getting Access to Nexus – New Users which describes the process of setting up a new user and must be completed before permissions – also referred to as ‘privileges’ – can be assigned. 

Only Nexus users with the Can Add, Delete and Manage Users permission can create and maintain other users and their permissions. Please note that two-factor authentication is mandatory for any user with the aforementioned permission enabled. Instructions on setting up 2FA are available here.

Privileges Tab

To access the Privileges tab for a user, hover over Admin, click Users, select the relevant user and then click the Privileges tab.

This is where the user permissions are assigned. You will note that the type of user is specified at the top of this section, with a dropdown picklist. By picking a role for the user, the privileges shown further down the section are restricted/become available/are pre-selected, but they can still be amended by ticking and unticking specific permissions and these pre-selections serve more as suggestions rather than as limitations (except for Restricted Users - see below)

When you change a user type, you are offered the choice of retaining their existing permissions or setting them to the default options for that user type automatically.

Users are automatically set up initially as Restricted and cannot access most functions in the system until this is changed. As soon as you change this user type to any other, you are able to grant them a combination of any permission within the system.

Restricted users can only access the areas specified by their locked permissions and only for schools they have been specifically assigned, via the Schools tab within their account.

The current user privileges available to select are listed under the Type of User dropdown. Many of these have a small information icon next to them to explain what ticking the privilege means.

Please scroll to the bottom of this guide for information on the Schools tab and what this can be used for.

Permissions & Their Meaning

Nova Access
Permission	Meaning
Can Access Nova	Can access the Nova module within Nexus. All other Nova access is controlled by this permission.
Can Access Key Stage Analysis	Can access non-pupil-level Nova reports for KS1, KS2, KS4 & KS5.
Can Access Pupil-Level Reports	Can access the Key Stage Analysis, including pupil-level reports.
Can Access Batch Reporting	Can access Nova Batch Reporting.
Can Access CLA Analysis	Can access Nova's non-pupil CLA-specific analysis (children looked after).
Can Access Pupil-Level Reports	Can access the CLA-specific analysis, including pupil-level reports.
Can Access LA Census Infographics	Can access the LA Census Infographics for schools, via Nova > Infographics.
Can Access NPD Exports	Can export the National Pupil Database.
Can Access Nova Admin	Allows the user to import User Defined Fields and LA Nova Preferences.

Other Access
Permission	Meaning
Can Access LA Summary Home Page	Can access the Nexus Homepage, including all Widgets.
Can Access KPIs	Can access the KPIs area of Nexus.
Can Access Alerts	Can access the Alerts area of Nexus.
Can Access Maps	Can access the Maps area of Nexus.
Can Access Watchsted	Can access Watchsted and all it's features.
Can Access Forum	Can access the Nexus forum.
Can Access Documents	Can access the Documents area but not add/edit LA documents.
Can Add/Edit LA Documents	Can access the Documents area and add/edit documents.
Can View National News	Can access the News > National News area of Nexus.
Can Manage Perspective News	Can create and send news articles to schools, via Perspective Lite.

 

Keypas Access
Permission	Meaning
Can Access Keypas	Can access the Keypas area of Nexus. All other Keypas access is controlled by this permission.
Can Access Assessment features	Can access Keypas imports and the Treeview grids for assessment data only.
Can Access Census features	Can access the Keypas imports and the Treeview grids for census data only.
Can Access CLA features	Can access the Keypas imports and the Treeview grids for CLA data only.
Can Access CIN features	Can access the Keypas imports and the Treeview grids for CIN data only.
Can Access Keypas Dashboard	Can access the Keypas Dashboard and available widgets on this page.
Can Access DfE Returns	Can access and export the Keypas DfE returns.
Can Access Search Pupils	Can access the Search Pupils functionality within Keypas.
Can Access Batch Reporting	Can access Batch Reporting via Keypas.
Can Access Keypas Admin	Allows the user to Manage Keypas School Groups Add new pupils Delete Keypas data Export results data Purge Extra Pupil Fields Access Data Cleaning Access LA and user Keypas settings

Administrator Access
Permission	Meaning
Can View Other Users	The user can access the profile for other LA users within Nexus. All other user-specific access is controlled by this permission.
Can View Other Users' Privileges	Can view but not edit the profile and Privileges tab for other LA users within Nexus.
Can Add, Delete & Manage Users	Can manage all other user accounts within the LA. This includes creating, deleting, archiving and changing permissions. If a user has this permission, two-factor authentication is enforced.
Can View Other Users' Schools	Can access the profile and Schools tab for other LA users within Nexus.
Can Add/Remove Other Users' Schools	Can manage the assigned schools for other users, via their Schools tab. Must have the Can View Other Users' Schools setting enabled.
Can Change Other Users' School Roles	Can manage the role entry for other users, via their Schools tab. Must have the Can View Other Users' Schools setting enabled.
Can Access Admin Level Info on User List	Allows the user to see and search the userlist by username, as well as see the last login date. It also allows the user to view lists of admin users from other LA's.
Can View Their Own Privileges	The user can see their own access levels via the Privileges tab.
Can View Their Own Schools	The user can see their own assigned schools via the Schools tab.
Can Add/Remove Their Own Schools	The user can add and remove their assigned schools via the Schools tab.
Can Change Their Own School Roles	The user can change their Role for schools assigned to them via the Schools tab.
Can Manage User Groups	Can create and maintain User Groups via Admin > User Groups.
Can Manage School Groups	Can create and maintain School Groups via Admin > School Groups.
Can Manage School RAGS, Categories, Tags & Grades	Can create and maintain LA-wide school Rags, Categories, Tags and Grades via the Admin menu.
Can Access Perspective Services Management Console	Can access the Perspective Services Console via Admin > Perspective Services. The user can edit and maintain the schools visibility of key areas, via Perspective Lite.
Can Manage Keystage Data Visibility	Allows the user to toggle the Data Tab visibility for schools and the LA, via the Nova > Data Settings area of the system.
Requires Two-Factor	Forces the user to set up and use two-factor authentication when logging in to Nexus.

 

Schools Access
Permission	Meaning
Can Access Schools	Can access and view basic school data via the Schools area of Nexus.
Can Add/Edit School	Can Add/Edit schools in your LA.
Can Access Schools Bulk Edit	Can access the bulk edit feature, which allows to update RAGs, Tags, Categories & Groups in large quantities at once.
Can Access Summary	Can access the Summary tab within a schools dashboard. Also grants access to export the school details and Infographic.
Can Access Data	Can access the Data Tab within a school's dashboard. This tab includes the yearly attainment data bar charts for school, LA and National.
Can Access Notes	Can access and manage Notes for a school.
Can Access Documents	Can access the Documents area of a school's dashboard.
Can Add/Edit Documents	Can access, upload and edit files within the Documents area of a schools dashboard.
Can Access Groups	Can access the Groups tab for a school.
Can Update School RAGs, Categories,              Tags & Grades	Can access and maintain items within the Groups tab for a school.
Can Access Websites	Can access the Websites tab within a school's dashboard.

 

Insight Access
Permission	Meaning
Can Access Insight	Can access the Insight area of Nexus. This permission is required for all other Insight permissions.
Can Access Nexus Insight	Can access non-pupil-level data in all areas of Insight, excluding CIN and CLA.
Include Access To Pupil-Level Insight	Can access pupil-level data in all areas of Insight, excluding CIN and CLA.
Can Access CLA Insight	Can access non-pupil-level data for CLA areas of Insight.
Include Access To Pupil-Level Insight	Can access pupil-level data for CLA areas of Insight.
Can Access CIN Insight	Can access non-pupil-level data for CIN areas of Insight.
Include Access To Pupil-Level Insight	Can access pupil-level data for CIN areas of Insight
Can Update Data Sources	Can update the default data sources that power Insight, via Insight > Settings > Data Source.

 

User Roles

Nexus has the concept of user roles to help you quickly allocate a standardised set of permissions to a user which we would expect they would need in that role. Standard sets of permissions for user roles can be amended to with additional permissions added or taken away to meet LA needs. 

Nexus Admin

The Nexus Admin role has ALL permissions for the whole system including setting up and managing users. Such a user will also be able to amend their own permissions. There should be very few of these users within a Local Authority (though you should always have more than one in most cases)

Standard

The standard user permissions provide access to most areas of the system and includes the ability to edit some areas of the system, they cannot create new users or change other users permissions. By default standard users cannot access CLA, CIN and SEN analysis so this is an education focused role but specific vulnerable group permissions could easily be added. 

School Improvement

The School Improvement user has a focus on education and can edit and view notes and information around schools as well as reporting and analysis. They cannot view/edit much outside of this area but can run their own Nova reports including at a pupil level:

LA Leadership

Users with LA Leadership permissions are operating at a high level and only need to access analysis. This is to encourage self-service from Nexus rather than officers having to take data and present it in other formats. They do not need to have permissions to edit any part of the system or to view details about schools etc. They do, however, get to see CLA and CIN analysis. 

Virtual Head

The virtual head role is focused mostly on CLA and CIN permissions with the ability to view some additional areas and run their own Nova reports and access some school details. 

Social Care Analyst

The social care analyst role is very similar to the Virtual Head but without the ability to access data about schools. 

Restricted 

The restricted user type has - as the name suggests - a very limit number of permissions, limited to the schools for which they are responsible. This is typically something that might be used for a School Improvement Partner who works with a few schools but does not have any need to view data or information about any other school. They certainly do not need to see any vulnerable children information. The warning below is displayed when the restricted user type is selected. 

Two Factor Authentication

All users with access to identifiable pupil/child level information through Nexus will require Two-Factor Authentication. This added security measure is essential to protect sensitive data from unauthorised access and ensure that only verified individuals can view or modify pupil records.

Any privileges that will require a user to set up Two-Factor Authentication will have a '2FA' mark aside them.

More information on how you can set up Two-Factor Authentication can be found here.

Schools Tab

This tab is visible and editable by the Nexus Administrators and Standard users. It allows you to select and add any school in the Local Authority to the user’s profile. 

Please note that Standard users can add themselves to schools but not change the Role entry.

Typically, you would use this to help someone like a School Improvement Officer or commissioned consultant who is focused on only certain schools and wants to access information on them quickly rather than see all the other schools mixed in.

For each school added, you can also record the role that the user performs in relation to that school. There is an extensive list of roles, but typically – if you are restricting users to certain schools – ‘School Improvement Partner’ and ‘Consultant’ roles will be more common (particularly if they are commissioned and not an LA salaried employee.) Most roles are largely for information and record-keeping and have no real effect on the rest of the system, however, setting someone as the School Improvement Partner will assign them as the LA Adviser for that school and this will be displayed within the schools own dashboard.

By clicking the Remove link at the end of any line, you can remove existing schools that a user previously had included in My Schools.

Hint:

In some LA's it may need to be an annual or termly task to update and modify this assignment of schools, particularly where that may be a product of the LA’s assessment of risk in the school.