An examination is a chain of privileged steps — writing questions, approving papers, scheduling, assigning candidates, generating results. Give all of that to one login and every exam depends on one person's integrity and one password. A proper role structure splits the chain so no single account can compromise it.
The five roles
| Role | Owns | Cannot |
|---|---|---|
| Superadmin | Full system — creates users, assigns roles | (top-level authority, sparingly held) |
| Question setter | Question bank for assigned subjects, with topic & difficulty tags | Schedule exams or see candidates |
| Moderator / validator | Review & correct questions for assigned subjects; certify papers | See dashboards, other subjects or results |
| Exam administrator | Exam pattern, scheduling, candidate assignment, results & analytics | Author or edit questions |
| Evaluator | Marking assigned subjective answers | See candidate identities or other evaluators' marks |
How the chain works
The key property: the exam administrator can only assign a paper after the validator approves it, and neither of them can touch what the other owns. Question-paper secrecy stops depending on trust and starts depending on structure — the same principle behind leak-proof paper delivery.
Separation of duties, in practice
❌ One shared admin login
- Anyone can see the paper before exam day
- Result edits untraceable to a person
- A leaked password compromises everything
- "Who did this?" has no answer
✅ Role-based structure
- Paper visible only to setter & assigned moderator
- Every action logged with user, IP, time
- One compromised account ≠ compromised exam
- Full accountability per step
Role separation and audit logging reinforce each other: roles limit what each person can do; logs record what they did. Institutions facing regulatory or court scrutiny need both.
Eklavvya, the assessment platform from the ePravesh family, ships this role model built in — assign your team, and the workflow enforces itself. Book a free demo to see role-based exam management live.
Frequently Asked Questions
What roles are needed to run an online exam?
Five core roles — superadmin (owns the system), question setter (builds the bank), moderator/validator (certifies papers error-free), exam administrator (schedules and assigns exams, generates results) and evaluator (marks subjective answers).
Why does role separation matter for exam security?
Because no single person should hold the whole exam — the question setter never schedules, the administrator never edits questions, the moderator sees only assigned subjects. Separation of duties makes leaks and manipulation require collusion, not one compromised account.
What does an exam moderator or validator do?
Reviews and corrects the question bank and exam paper for assigned subjects before the exam is approved for use — the quality gate that certifies a paper error-free. Moderators see only their subjects, nothing else.
How is role-based access enforced?
Each user account carries only its role's permissions, and every action is recorded in the activity log with user, time and IP — so authority is limited by design and usage is auditable after the fact.