Delphinium Service Credentials
Delphinium uses a combination of a scoped token and a restricted administrator role to limit access and protect your Canvas data. In this tutorial, we will configure the Delphinium Service administrator role. The Delphinium Service role has very limited permissions and only gives Delphinium access to Canvas data that it needs to function properly. The Delphinium Service role is further restricted by the scope of the token it uses. This tutorial assumes you have already installed Delphinium.
Step 1: Create a Delphinium Service User
Open the Canvas Admin area as a user in the ROOT account
Open the People page
Click +People
Add "Delphinium Service" to the Full Name field
Add "support@delphi-me.com" to the Email field
If necessary, add "support@delphi-me.com" to the SIS ID field
Uncheck the Email the user about this account creation box
Click Add User
Step 2: Create a Delphinium Service Admin Role
Open the Permissions page
Open the Account Roles tab
Click Add Role
Add "Delphinium Service" to the Role Name field
Click Save
Click X to close the new account pane
Step 3: Give Limited Permissions to the Delphinium Service Admin Role
In this step we create a Canvas role with NO permissions and add a small number of permissions that allow Delphinium to see account level data like grading schemes and groups.
For each of the following terms...
Grades - edit (Delphinium does NOT edit grades, but the Canvas permission model requires that the role have this permission
Groups - view all student groups
Users - view list
...follow these steps:
Use the Search permissions box to search each term above
Click the red circled X icon
Click Enable, the icon will change to a green check mark
Next,...
Search for the term "Manage groups"
Click the down arrow icon
Check the box to the right of the Groups - manage row
Delete the text from the Search permissions box
7. Click the column header for Delphinium Service to confirm that the Delphinium Service no more or less permissions than is described above
Step 4: Assign the Delphinium Service User to the Delphinium Service Admin Role
Open the Settings page
Open the Admins tab
Click + Account Admins
Add "support@delphi-me.com" to the Copy and paste a list of email addresses to add users box
Select Delphinium Service from the Add More drop down box
Click Continue...
Click OK Looks Good, Add This 1 User
Step 5: Authorize the Delphinium Service User
Return to the People page
Search for "support@delphi-me.com" in the Search people... box
Click the Act as icon for the Delphinium Service user
Click Proceed
Open the Delphinium page
Open the Credentials tab
Click Authorize Delphinium in this Account
Click Authorize
Confirm that it says "Delphinium Service" below Delphinium Service Admin User
Click Stop Acting as User