Quick Answer
Assignment Administrator and Assignor permissions for External Learning can be granted through a synchronized Entra ID Group rather than assigned to each user individually, using the Group's parent/child structure and Group ownership - so a manager's approval scope updates automatically as Group membership changes in Entra ID.
What This Article Helps With
This article is for Technical/IT Admins who want to understand how External Learning approval permissions can be driven by Entra ID Group synchronization, rather than assigned to individual users.
Group-Based Assignment of External Learning Permissions
Assignment Administrator and Assignor are the two permissions that control External Learning approval access - see External Learning Tracking - Permissions for what each one controls. Rather than assigning these permissions to individual users, they can be granted through a Group, consistent with how Group ownership already determines Assignor scope generally (see Understanding Groups in Pinnacle Series: Members, Owners, and Parent & Child Groups).
When that Group's membership is kept in sync with Entra ID, a manager's External Learning approval scope updates automatically as their org unit's membership changes in Entra ID, without a Pinnacle Series Administrator needing to manually update permissions for each change.
Helpful Tips
- See Managing External Learning Records: Approving, Denying, and Creating Records on Behalf of Users for the approval workflow this permission controls access to.
- See Automating Group Membership and Permission Inheritance via Entra ID Sync for how Entra ID/AD synchronization keeps Group membership current more generally.