There are times you may want to restrict where your students can view their training. In Schoox you can do this as an Academy Admin, Training Manager or if you are a Manager with the "Limit Access" permission enabled, and you can restrict your employees per course for each defined unit in your academy.
You, as an Admin, can restrict access by IP address or physical address. Students may get into the academy, but if they try to access a lecture from anywhere other than the IP or physical address you have set up, a notification will appear explaining to them why they cannot.
Please note that only Admins can set up the IP/Physical Addresses; Managers will be then able to select the Units (but not set their addresses up).
What Limit Access Does (and Doesn’t Do)
DOES block access to specified Schoox courses (reimbursable training activities) based on geofencing or corporate network connections
DOES NOT block Schoox logins or access to non-reimbursable activities in Schoox, like Social, Gamification, Performance modules, etc.
Steps to Limit Access
Step 1: Determine what IP addresses and/or physical addresses are allowed from each restricted unit.
In the left navigation, make sure you are in the Academy Workspace.
When in the Academy Workspace, select Academy Admin for all Academy Administration options.
Select Organization and then Set Up Organization.
Here, select the Units tab.
Find the unit you need restricted access for, click edit under each name, and type in the appropriate IP address and/or physical address in the appropriate fields. One of the other is needed, but not both.
The IP Address is always going to be the most reliable of these two choices, and Schoox will always check if this option is available before using the physical address.
A street address and zip code are all that is needed – Schoox will fill in the rest.
Click Save when finished.
Tip! If your academy uses an sFTP integration to manage the hierarchy, adding IP/Physical address details to your units can be automated, provided you can include these details in a distinct field on your provisioning file.
Please read also: Checks Performed upon Location Restriction
Step 2: Tell Schoox to which students these restrictions apply.
When in the Academy Workspace, select Academy Admin for all Academy Administration options.
Select Organization and then Manage Team Members.
Make sure you are on the Employees tab.
Select Edit team member to access the user’s profile.
In the Role dropdown, choose Hourly Worker, then save your changes.
Once saved, the Hourly Worker role will be successfully applied to the user.
Tip! If your academy uses an sFTP integration to provision users in Schoox, identifying hourly workers can also be automated, provided you can either:
A) specify members that should be hourly workers based on Jobs in your file, or
B) include a distinct field that specifies that a given user should be an Hourly Worker (e.g. include a value like TRUE or YES in the indicated column)
Step 3: Select to which specific Units and students you want to restrict access in each course.
You will need to have the Limit Access permission in order to limit access.
In the Academy Workspace, navigate to Training Admin, then go to Configuration > Access Limits.
This page consists of two main steps.
On the first step, select the course you need to restrict access to.
Please note that:
Admins can see all Academy Courses, as they do under the Courses Listing page.
Managers with the “Limit Access” permission will be able to see the courses that are in categories where they have read permissions (including "Without Category") and are public.
Instructors will also be able to see their private, uncategorized courses there.
Then Managers, based on the Limit Access Setting, defined for the academy they may be able to see also the:
- Uncategorized Private Courses
- Categorized Private Courses
- Courses they have created that are now in categories where they don’t have access anymore.
To configure this setting, please navigate to Academy Workspace > Settings, select the Training filter type and then select Limit access.
For more information on the Academy setting please check also: Learning Management Academy Settings
On the second step, you'll find all the Units associated with this course; the ones that should be limited based on the IP address or the physical addresses that are active in the list, and you can then check the box next to each unit you’d like to have this restricted access.
Please note that Admin will be able to see all org nodes while a Manager will be able to see all org nodes under their org structure.
Don't forget to click Save when finished!
Now, employees whose names are checked as Hourly Workers will only be able to access courses associated with the restricted units from the specified IP and/or physical address.
Limit Access to Mobile Devices
You, as an Admin, have the option to determine who should have access to courses when it comes to users accessing courses via a cellular connection on the mobile app. You have also the option to disable access to all users via a cellular connection.
When in the Academy Workspace, select Settings.
Select the Training filter type, then navigate to the Mobile Access section and switch the toggle to No. Click Save when finished.
If you decide to enable the cellular connection partially, toggle the option to Yes, and limit access as you see fit to any of the three categories. Save when finished.
Expand Available Locations for Hourly Workers
As an administrator, you can give hourly workers more flexibility in where they access courses by enabling a specific academy setting. This allows them to access content from any approved location, even if they’re not assigned to the units used in course restrictions.
How to Enable This Setting
Navigate to your Settings
In the left navigation, make sure you are in the Academy Workspace.
When in the Academy Workspace, select Settings.
From the left-hand side, select the Training filter type.
Open Limit Access
Set “Allow hourly workers to access courses if they’re located in an approved unit” to Yes
What This Means for Access
When this setting is enabled, hourly workers don’t need to be assigned to one of the units selected in a course’s Limit Access settings. As long as they are physically located in a unit that you’ve marked as acceptable, they’ll be able to access the course.
This is especially useful if your hourly staff works across multiple locations or needs access from locations outside their assigned units.
If the Setting Is Disabled
If you leave this setting disabled, hourly workers will only be able to access these courses from locations tied to the units they’re assigned to. Access will remain strictly limited to those locations.
FAQs
Question 1: If a course is set with geofencing and a user downloads content for offline access, what happens when they leave the geofenced area, can they still see that content on mobile?
Answer 1: If a course has a limit access rule, and if an hourly worker belongs to this rule, then this user cannot download content for offline access, even from the permitted location. The download button is hidden for this user.
Question 2: What happens if they were logged into an active session before the Geofence was put in place and somehow stayed logged in long enough to complete the training away from the address/IP designated in the Geofence?
Answer 2: Users are redirected to the course card when they complete a lecture. Each time the course card is opened, we check the user's location. So even if the user stays logged in, if they change their location, their access will be restricted. But! If there is, for example, a 2-hour video lecture and a user opens it in the permitted location and stays inside this lecture and then changes their location, then they will be able to complete this lecture. But this is something that can be done via a laptop, as well.