Nexus permissions

This guide follows Getting Access to Nexus – New Users which describes the process of setting up a new user and must be completed before permissions – also referred to as ‘privileges’ – can be assigned. 

Only Nexus users with the Can Add, Delete and Manage Users permission can create and maintain other users and their permissions. Please note that two-factor authentication is mandatory for any user with the aforementioned permission enabled. Instructions on setting up 2FA are available here.

Privileges Tab

To access the Privileges tab for a user, hover over Admin, click Users, select the relevant user and then click the Privileges tab.

This is where the user permissions are assigned. You will note that the type of user is specified at the top of this section, with a dropdown picklist. By picking a role for the user, the privileges shown further down the section are restricted/become available/are pre-selected, but they can still be amended by ticking and unticking specific permissions and these pre-selections serve more as suggestions rather than as limitations (except for Restricted Users - see below)

When you change a user type, you are offered the choice of retaining their existing permissions or setting them to the default options for that user type automatically.

Users are automatically set up initially as Restricted and cannot access most functions in the system until this is changed. As soon as you change this user type to any other, you are able to grant them a combination of any permission within the system.

Restricted users can only access the areas specified by their locked permissions and only for schools they have been specifically assigned, via the Schools tab within their account.

The current user privileges available to select are listed under the Type of User dropdown. Many of these have a small information icon next to them to explain what ticking the privilege means.

Please scroll to the bottom of this guide for information on the Schools tab and what this can be used for.

Permissions & Their Meaning

Nova Access
Permission	Meaning
Can Access Nova	Can access the Nova module within Nexus. All other Nova access is controlled by this permission.
Can Access Key Stage Analysis	Can access non-pupil-level Nova reports for KS1, KS2, KS4 & KS5.
Can Access Pupil-Level Reports	Can access the Key Stage Analysis, including pupil-level reports.
Can Access Batch Reporting	Can access Nova Batch Reporting.
Can Access CLA Analysis	Can access Nova's non-pupil CLA-specific analysis (children looked after).
Can Access Pupil-Level Reports	Can access the CLA-specific analysis, including pupil-level reports.
Can Access LA Census Infographics	Can access the LA Census Infographics for schools, via Nova > Infographics.
Can Access NPD Exports	Can export the National Pupil Database.
Can Access Nova Admin	Allows the user to import User Defined Fields and LA Nova Preferences.

Other Access
Permission	Meaning
Can Access LA Summary Home Page	Can access the Nexus Homepage, including all Widgets.
Can Access KPIs	Can access the KPIs area of Nexus.
Can Access Alerts	Can access the Alerts area of Nexus.
Can Access Maps	Can access the Maps area of Nexus.
Can Access Watchsted	Can access Watchsted and all it's features.
Can Access Forum	Can access the Nexus forum.
Can Access Documents	Can access the Documents area but not add/edit LA documents.
Can Add/Edit LA Documents	Can access the Documents area and add/edit documents.
Can View National News	Can access the News > National News area of Nexus.
Can Manage Perspective News	Can create and send news articles to schools, via Perspective Lite.

 

Keypas Access
Permission	Meaning
Can Access Keypas	Can access the Keypas area of Nexus. All other Keypas access is controlled by this permission.
Can Access Assessment features	Can access Keypas imports and the Treeview grids for assessment data only.
Can Access Census features	Can access the Keypas imports and the Treeview grids for census data only.
Can Access CLA features	Can access the Keypas imports and the Treeview grids for CLA data only.
Can Access CIN features	Can access the Keypas imports and the Treeview grids for CIN data only.
Can Access Keypas Dashboard	Can access the Keypas Dashboard and available widgets on this page.
Can Access DfE Returns	Can access and export the Keypas DfE returns.
Can Access Search Pupils	Can access the Search Pupils functionality within Keypas.
Can Access Batch Reporting	Can access Batch Reporting via Keypas.
Can Access Keypas Admin	Allows the user to Manage Keypas School Groups Add new pupils Delete Keypas data Export results data Purge Extra Pupil Fields Access Data Cleaning Access LA and user Keypas settings

Administrator Access
Permission	Meaning
Can View Other Users	The user can access the profile for other LA users within Nexus. All other user-specific access is controlled by this permission.
Can View Other Users' Privileges	Can view but not edit the profile and Privileges tab for other LA users within Nexus.
Can Add, Delete & Manage Users	Can manage all other user accounts within the LA. This includes creating, deleting, archiving and changing permissions. If a user has this permission, two-factor authentication is enforced.
Can View Other Users' Schools	Can access the profile and Schools tab for other LA users within Nexus.
Can Add/Remove Other Users' Schools	Can manage the assigned schools for other users, via their Schools tab. Must have the Can View Other Users' Schools setting enabled.
Can Change Other Users' School Roles	Can manage the role entry for other users, via their Schools tab. Must have the Can View Other Users' Schools setting enabled.
Can Access Admin Level Info on User List	Allows the user to see and search the userlist by username, as well as see the last login date. It also allows the user to view lists of admin users from other LA's.
Can View Their Own Privileges	The user can see their own access levels via the Privileges tab.
Can View Their Own Schools	The user can see their own assigned schools via the Schools tab.
Can Add/Remove Their Own Schools	The user can add and remove their assigned schools via the Schools tab.
Can Change Their Own School Roles	The user can change their Role for schools assigned to them via the Schools tab.
Can Manage User Groups	Can create and maintain User Groups via Admin > User Groups.
Can Manage School Groups	Can create and maintain School Groups via Admin > School Groups.
Can Manage School RAGS, Categories, Tags & Grades	Can create and maintain LA-wide school Rags, Categories, Tags and Grades via the Admin menu.
Can Access Perspective Services Management Console	Can access the Perspective Services Console via Admin > Perspective Services. The user can edit and maintain the schools visibility of key areas, via Perspective Lite.
Can Manage Keystage Data Visibility	Allows the user to toggle the Data Tab visibility for schools and the LA, via the Nova > Data Settings area of the system.
Requires Two-Factor	Forces the user to set up and use two-factor authentication when logging in to Nexus.

 

Schools Access
Permission	Meaning
Can Access Schools	Can access and view basic school data via the Schools area of Nexus.
Can Add/Edit School	Can Add/Edit schools in your LA.
Can Access Schools Bulk Edit	Can access the bulk edit feature, which allows to update RAGs, Tags, Categories & Groups in large quantities at once.
Can Access Summary	Can access the Summary tab within a schools dashboard. Also grants access to export the school details and Infographic.
Can Access Data	Can access the Data Tab within a school's dashboard. This tab includes the yearly attainment data bar charts for school, LA and National.
Can Access Notes	Can access and manage Notes for a school.
Can Access Documents	Can access the Documents area of a school's dashboard.
Can Add/Edit Documents	Can access, upload and edit files within the Documents area of a schools dashboard.
Can Access Groups	Can access the Groups tab for a school.
Can Update School RAGs, Categories,              Tags & Grades	Can access and maintain items within the Groups tab for a school.
Can Access Websites	Can access the Websites tab within a school's dashboard.

 

Insight Access
Permission	Meaning
Can Access Insight	Can access the Insight area of Nexus. This permission is required for all other Insight permissions.
Can Access Nexus Insight	Can access non-pupil-level data in all areas of Insight, excluding CIN and CLA.
Include Access To Pupil-Level Insight	Can access pupil-level data in all areas of Insight, excluding CIN and CLA.
Can Access CLA Insight	Can access non-pupil-level data for CLA areas of Insight.
Include Access To Pupil-Level Insight	Can access pupil-level data for CLA areas of Insight.
Can Access CIN Insight	Can access non-pupil-level data for CIN areas of Insight.
Include Access To Pupil-Level Insight	Can access pupil-level data for CIN areas of Insight
Can Update Data Sources	Can update the default data sources that power Insight, via Insight > Settings > Data Source.

 

Schools Tab

This tab is visible and editable by the Nexus Administrators and Standard users. It allows you to select and add any school in the Local Authority to the user’s profile. 

Please note that Standard users can add themselves to schools but not change the Role entry.

Typically, you would use this to help someone like a School Improvement Officer or commissioned consultant who is focused on only certain schools and wants to access information on them quickly rather than see all the other schools mixed in.

For each school added, you can also record the role that the user performs in relation to that school. There is an extensive list of roles, but typically – if you are restricting users to certain schools – ‘School Improvement Partner’ and ‘Consultant’ roles will be more common (particularly if they are commissioned and not an LA salaried employee.) Most roles are largely for information and record-keeping and have no real effect on the rest of the system, however, setting someone as the School Improvement Partner will assign them as the LA Adviser for that school and this will be displayed within the schools own dashboard.

By clicking the Remove link at the end of any line, you can remove existing schools that a user previously had included in My Schools.

Hint:

In some LA's it may need to be an annual or termly task to update and modify this assignment of schools, particularly where that may be a product of the LA’s assessment of risk in the school.