Managing Your Onshape EDU Enterprise Subscription

It is best to always use the enterprise-specific URL to access Onshape, for all users. When using the enterprise-specific URL, just sign in as you normally would and you land in the Onshape EDU enterprise account for your organization.

Use just cad.onshape.com, however, and you land in a private Onshape account for your user. At this point, to switch into your enterprise account, expand the account menu and select Switch to <enterprise name>. This requires that you sign in again, and then you land in your Onshape enterprise account.

Once in your enterprise account, you can use the Switch to Onshape account command in the User menu to switch back to cad.onshape.com

Only enterprise admins can upload a logo. To upload a logo:

1. Access the Enterprise settings for your account.

2. Select Details at the bottom of the list on the left.

3. At the top of the page that appears on the right, click Change under the icon of the building.

4. Select the image you want to use as your logo.

5. Resize if necessary.

6. Click Save to keep your changes.

For information on adding users/students to your EDU enterprise account, See Adding students.

For information on setting up 2-factor authentication for your enterprise, and for information on requiring users to sign in to Onshape using a pre-existing single sign on mechanism, see Two-factor Authentication for Authentication information and Configuring Integration with Identity Providers for SSO information.

One of the most important aspects of administering your Education Enterprise is to ensure that the proper level of permissions are provided to your users to ensure they can do what needs to be done on the platform. All members of the enterprise can view the following tabs in their account settings:

• Project roles

• Permission schemes

• Custom properties

• Categories

• Items

• Applications

• Release management

• Details

The areas that an enterprise member can edit vary depending on their permissions, as noted below.

Below is the complete list of Global permissions that are available and recommendations for how to configure them.

Grants the users assigned to this global permission full control and full permission over all of the enterprise’s resources. Users with this permission can edit the following tabs when accessing Enterprise settings:

• All tabs

Additionally, enterprise administrators can see all documents within the enterprise regardless of whether they are shared with them or not.

Since this permission has full authority over the entire enterprise, it is appropriate only for head teachers and IT administrators at your institution. Being able to see all documents can be useful for teachers, but can also be overwhelming depending on how many users are in your organization.

Grants the users assigned to this global permission the ability to add and remove users from the enterprise account as well as view and modify teams. Users with this permission can edit the following tabs when accessing Enterprise settings:

• Users

• Teams

Users assigned to the Educators team can Manage users and teams. Enterprise admins can edit this permission.

This permission is very useful for teachers and teacher assistants as it allows them to manage adding and removing their own students, as well as putting them into teams. This permission includes the ability to remove users from the enterprise, so it is often not appropriate for students.

Grants the users assigned to this global permission the ability to view and modify Project roles and Permission schemes.

Users with this permission can edit the following tabs when accessing Enterprise settings:

• Project roles

• Permission schemes

Only enterprise admins can edit this permission.

Most typical educational applications of Onshape do not require sophisticated roles to be set up or managed. Unless an advanced engineering use-case exists within the institution (such as research) then the recommendation is to have no users have this permission.

Grants the users assigned to this global permission the ability to permanently delete any resources that have been placed in Trash (through the Documents page > Trash) and also to permanently delete a workspace from within the Version and history panel (of documents they have created).

Users assigned to the Educators team can Permanently delete resources. Enterprise admins can edit this permission.

This permission is up to the discretion of the institution. Since there is no limit of the number of documents within your enterprise, there is no strict need to be able to permanently delete. However being able to delete documents can allow users to stay more organized.

Grants the users assigned to this global permission the ability to fully control reports and analytics, via the Analytics tab in the enterprise account. The default users assigned to this global permission is the Educators team. Enterprise admins can edit this permission.

The Analytics tab is most useful for educators who would like data on how students are working. As the Analytics tab contains data about all users, it is often not appropriate for students to have access.

Grants the users assigned to this global permission the ability to create projects; the All Enterprise Users team is automatically assigned to this Global permission. Add and remove users and teams as desired in projects via the Documents page. The default users assigned to this global permission is the All enterprise users team. Enterprise admins can edit this permission.

Most typical educational applications of Onshape do not use the nuanced permission schemes provided by projects. Unless an advanced engineering use-case exists within the institution (such as research) then the recommendation is to have no users have this permission.

Grants the users assigned to this global permission the ability to create documents and folders in the Enterprise name filter. The default users assigned to this global permission is the All enterprise users team. Enterprise admins can edit this permission.

Grants the users assigned to this global permission the ability to create Release candidates. The default users assigned to this global permission is the All enterprise users team. Enterprise admins can edit this permission.

Most typical educational applications of Onshape do not use release management workflows. Unless an advanced engineering use-case exists within the institution (such as research) then the recommendation is to have no users have this permission or any other release-specific permissions.

Grants the users assigned to this global permission the ability to approve Release candidates. The default users assigned to this global permission is the All Enterprise team. Enterprise admins can edit this permission.

Most typical educational applications of Onshape do not use release management workflows. Unless an advanced engineering use-case exists within the institution (such as research) then the recommendation is to have no users have this permission or any other release-specific permissions.

Grants the users assigned to this global permission the ability to sign in to the App store and subscribe to applications. The default users assigned to this global permission is the All enterprise users team. Enterprise admins can edit this permission.

Since the app store contains applications that users can pay for, some institutions may choose to prevent students from accessing this. Users will not be able to charge the institution for apps. Since there are free and useful apps in the app store, we recommend that instructors have access so that they can explore it.

Grants the users assigned to this global permission the ability to access public documents. The default users assigned to this global permission is the All enterprise users team. Enterprise admins can edit this permission.

Grants the users assigned to this global permission the ability to share documents by an anonymous link to people outside of the enterprise and outside of Onshape. These links provide read-only access to the document shared. When a user is associated with this global permission, they have an additional option in the Share dialog. The default users assigned to this global permission is the All enterprise users team. Enterprise admins can edit this permission.

For more information, see Share Documents.

This can be a great way for students to share their work with others (such as parents or potential employers), but is sometimes regulated by state or federal privacy regulations. It is useful for all enterprise users unless regulated.

Teams are an important part of administering Onshape across your institution. A team is a list of users which can be used for two primary purposes:

• Applying global permissions - Teams can be applied to global permissions so that every member of the team receives the global permission. This is useful for giving all instructors access to adding users, and allowing students to add apps, for example.

• Sharing documents with large groups of users - When sharing a document or folder, teams can be selected to quickly distribute access to a list of people at the same time. This is useful for providing an assignment to all students at the same time, and allowing students to share with the grading TA’s, for example.

When set up with your Onshape education enterprise account, two teams are automatically created:

1. All enterprise users - A team with all users in your enterprise, managed automatically.

2. Educators - A team with all educators in your enterprise. This team is very useful for giving educators access to global permissions such as managing teams and accessing analytics. This lets you create needed global permissions so all Educators can use them.

   Educator accounts must be added to this team to be granted the ability to create Classes and Assignments.

For more information on how teams work, see Understanding Teams.

Users can be assigned to teams in bulk by using a CSV file. This is done in the same way that bulk uploading user is performed, but can be done even if all users are already on the platform. To bulk add users to teams:

1. Before beginning, ensure that all of the teams that you wish to add students to have already been created.

2. Click your name in the upper right corner of the window to open the User menu.

3. Select Enterprise settings.

4. Click Users in the left tab pane.

5. In the top right corner of the page, click Import from CSV file button.

6. Click Choose File to select the previously-created .csv file listing all users you want to add to the team.

7. Click Import. You receive a report on the status of all of the users who were assigned to a team, along with any errors that may have occurred.

Users can transfer the ownership of their documents outside Enterprise. This permission is only granted by administrators, and is given to users and/or teams. All educators are granted permission by default. Clicking this option opens the Configure permission dialog. Select the Individuals and/or Teams tab, enter the parties to which you want permission granted, and click Add. Then click Close.

Once permission is granted, the user right-clicks on a document from the Documents page and selects Transfer ownership from the context menu (shown in the first image below). The Transfer ownership dialog opens where an Individual, Company, or Enterprise is selected (shown in the second image below).:

Click Transfer ownership, and an email notification is sent to the selected individual, company, or enterprise. As stated in the dialog, when transfer confirmation is required, document ownership will not change until the pending transfer is accepted. Transferring out of an Enterprise will remove access to the document from the Enterprise domain.