# New Authz/RBAC feature in Verawood: permission to create course?

**URL:** <https://discuss.openedx.org/t/new-authz-rbac-feature-in-verawood-permission-to-create-course/19295>\
**Category:** Site Operators\
**Created:** [August 12, 2026, 3:56pm UTC](https://discuss.openedx.org/t/new-authz-rbac-feature-in-verawood-permission-to-create-course/19295 "2026-08-12T15:56:54Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![mboisson](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.openedx.org/mboisson/32/7551_2.png) [@mboisson](https://discuss.openedx.org/u/mboisson)\
**Post date:** [August 12, 2026, 3:56pm UTC](https://discuss.openedx.org/t/new-authz-rbac-feature-in-verawood-permission-to-create-course/19295/1 "2026-08-12T15:56:54Z")

</div>

Hi,

While testing the new Authz/RBAC feature, but the “Course Admin” does not allow to create courses. How do we give permission to someone to create courses within an org ?

There is an option from the user to request that permission

 ![Capture d’écran, le 2026-08-12 à 11.49.07](https://us1.discourse-cdn.com/flex020/uploads/openedx/original/2X/2/2b5c7acba7ce43ee1f4b220e229df38e896f99cd.jpeg)

and it says that the request is pending, but pending where ? As a super admin, I don’t see anything about that.

---

<div class="post-metadata">

**Author:** ![TyHob](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.openedx.org/tyhob/32/7930_2.png) [@TyHob](https://discuss.openedx.org/u/TyHob)\
**Post date:** [August 14, 2026, 2:35pm UTC](https://discuss.openedx.org/t/new-authz-rbac-feature-in-verawood-permission-to-create-course/19295/2 "2026-08-14T14:35:44Z")

</div>

This is one of the worst documented parts of the platform, sadly, and isn’t new with RBAC. In order to grant the permission the process is:

- User requests the permission as you did
- An admin goes to the _ **Studio** _ Django admin “Course Creators” app (`/admin/course_creators/coursecreator/`)
  - This app does not exist in the LMS admin, which is what causes a lot of the confusion

- Admin changes the status and selects applicable orgs from the list or “All Orgs” and saves
- User should now be able to create courses in Studio

I’ve been working with the platform for something like 10 yrs and just learned this a month ago. I’ll write up a how-to doc for the docs site about it today.

---

<div class="post-metadata">

**Author:** ![mboisson](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.openedx.org/mboisson/32/7551_2.png) [@mboisson](https://discuss.openedx.org/u/mboisson)\
**Post date:** [August 14, 2026, 2:37pm UTC](https://discuss.openedx.org/t/new-authz-rbac-feature-in-verawood-permission-to-create-course/19295/3 "2026-08-14T14:37:48Z")

</div>

> [@TyHob](#):
>
> - LMS admin

Wait… what is the Studio admin vs LMS admin ? There are two Django admin panels ?!

---

<div class="post-metadata">

**Author:** ![TyHob](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.openedx.org/tyhob/32/7930_2.png) [@TyHob](https://discuss.openedx.org/u/TyHob)\
**Post date:** [August 14, 2026, 2:40pm UTC](https://discuss.openedx.org/t/new-authz-rbac-feature-in-verawood-permission-to-create-course/19295/4 "2026-08-14T14:40:43Z")

</div>

Indeed 😔 , and they have overlapping but not the same apps. Yet another reason we’re considering trying to consolidate the two.

---

<div class="post-metadata">

**Author:** ![mboisson](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.openedx.org/mboisson/32/7551_2.png) [@mboisson](https://discuss.openedx.org/u/mboisson)\
**Post date:** [August 14, 2026, 2:43pm UTC](https://discuss.openedx.org/t/new-authz-rbac-feature-in-verawood-permission-to-create-course/19295/5 "2026-08-14T14:43:59Z")

</div>

Mind blown…

and where is that documented ?

This is the first time in 2 years of using OpenEdX that I stumble onto that information…

I never had a clue that there was a studio.edx./admin different from edx./admin …

---

<div class="post-metadata">

**Author:** ![TyHob](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.openedx.org/tyhob/32/7930_2.png) [@TyHob](https://discuss.openedx.org/u/TyHob)\
**Post date:** [August 14, 2026, 2:52pm UTC](https://discuss.openedx.org/t/new-authz-rbac-feature-in-verawood-permission-to-create-course/19295/6 "2026-08-14T14:52:57Z")

</div>

Honestly I’m not sure either one is explicitly documented. The LMS admin is the one used 99% of the time, so gets referenced a lot more often in docs. Most, if not all, references in [docs.openedx.org](http://docs.openedx.org) to Studio/CMS admin are in release notes. I’ll try to add a doc to the site operator concepts along with this PR so at least there will be _something_ that people can find.

---

<div class="post-metadata">

**Author:** ![mboisson](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.openedx.org/mboisson/32/7551_2.png) [@mboisson](https://discuss.openedx.org/u/mboisson)\
**Post date:** [August 14, 2026, 5:22pm UTC](https://discuss.openedx.org/t/new-authz-rbac-feature-in-verawood-permission-to-create-course/19295/7 "2026-08-14T17:22:38Z")

</div>

Thanks!

To be honest though, it makes little sense that a “Course admin” can manage permissions, but can’t actually create a course. That should be fixed in the RBAC implementation.

---

<div class="post-metadata">

**Author:** ![TyHob](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.openedx.org/tyhob/32/7930_2.png) [@TyHob](https://discuss.openedx.org/u/TyHob)\
**Post date:** [August 14, 2026, 5:33pm UTC](https://discuss.openedx.org/t/new-authz-rbac-feature-in-verawood-permission-to-create-course/19295/8 "2026-08-14T17:33:07Z")

</div>

I don’t disagree, but it is somewhat more complicated by the fact that several orgs have whole workflows with different requirements around the way things currently work. I think Product has opinions on the way it should evolve. Jenna could probably use your feedback if you’d like to get in touch with her about it.

---

<div class="post-metadata">

**Author:** ![mboisson](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.openedx.org/mboisson/32/7551_2.png) [@mboisson](https://discuss.openedx.org/u/mboisson)\
**Post date:** [August 17, 2026, 12:00pm UTC](https://discuss.openedx.org/t/new-authz-rbac-feature-in-verawood-permission-to-create-course/19295/9 "2026-08-17T12:00:10Z")

</div>

Who is Jenna ? 🙂

---

<div class="post-metadata">

**Author:** ![TyHob](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.openedx.org/tyhob/32/7930_2.png) [@TyHob](https://discuss.openedx.org/u/TyHob)\
**Post date:** [August 17, 2026, 12:53pm UTC](https://discuss.openedx.org/t/new-authz-rbac-feature-in-verawood-permission-to-create-course/19295/10 "2026-08-17T12:53:53Z")

</div>

This would be @jmakowski 😄

---

<div class="post-metadata">

**Author:** ![sarina](https://sea2.discourse-cdn.com/flex020/user_avatar/discuss.openedx.org/sarina/32/2308_2.png) [@sarina](https://discuss.openedx.org/u/sarina)\
**Post date:** [August 24, 2026, 3:39pm UTC](https://discuss.openedx.org/t/new-authz-rbac-feature-in-verawood-permission-to-create-course/19295/11 "2026-08-24T15:39:25Z")

</div>

Just following up here, @TyHob wrote documentation 🙌 thanks Ty!

Find them here: [Grant Course Creation Access in Studio — Latest documentation](https://docs.openedx.org/en/latest/site_ops/how-tos/grant_course_creation_access.html)
