Index: lams_admin/conf/language/lams/ApplicationResources_en_AU.properties
===================================================================
diff -u -r4248afaa041552a4c2d026140e1b1704e98d7ed1 -rd92b59deb4419e87265552c6ced3bda1f55ba97a
--- lams_admin/conf/language/lams/ApplicationResources_en_AU.properties	(.../ApplicationResources_en_AU.properties)	(revision 4248afaa041552a4c2d026140e1b1704e98d7ed1)
+++ lams_admin/conf/language/lams/ApplicationResources_en_AU.properties	(.../ApplicationResources_en_AU.properties)	(revision d92b59deb4419e87265552c6ced3bda1f55ba97a)
@@ -525,6 +525,7 @@
 label.edit.tool.consumer  =Edit tool consumer details
 label.add.tool.consumer  =Add new tool consumer
 sysadmin.serversecret  =Secret
+sysadmin.lti.consumer.monitor.roles  =Comma-separated list of monitor roles
 label.tool.consumers.count  =LTI Tool Consumers(s) in total
 
 #======= End labels: Exported 515 labels for en AU =====
Index: lams_admin/conf/xdoclet/struts-forms.xml
===================================================================
diff -u -rf0baac16e87a8029d100301ad9c5390244a9f725 -rd92b59deb4419e87265552c6ced3bda1f55ba97a
--- lams_admin/conf/xdoclet/struts-forms.xml	(.../struts-forms.xml)	(revision f0baac16e87a8029d100301ad9c5390244a9f725)
+++ lams_admin/conf/xdoclet/struts-forms.xml	(.../struts-forms.xml)	(revision d92b59deb4419e87265552c6ced3bda1f55ba97a)
@@ -93,6 +93,7 @@
 	<form-property name="disabled" type="java.lang.Boolean" initial="false"/>
 	<form-property name="lessonFinishUrl" type="java.lang.String"/>
 	<form-property name="timeToLiveLoginRequestEnabled" type="java.lang.Boolean" initial="false"/>
+	<form-property name="ltiToolConsumerMonitorRoles" type="java.lang.String"/>
 </form-bean>
 
 <form-bean name="ConfigForm" type="org.apache.struts.action.DynaActionForm">
Index: lams_admin/web/lti/ltiConsumer.jsp
===================================================================
diff -u -r4248afaa041552a4c2d026140e1b1704e98d7ed1 -rd92b59deb4419e87265552c6ced3bda1f55ba97a
--- lams_admin/web/lti/ltiConsumer.jsp	(.../ltiConsumer.jsp)	(revision 4248afaa041552a4c2d026140e1b1704e98d7ed1)
+++ lams_admin/web/lti/ltiConsumer.jsp	(.../ltiConsumer.jsp)	(revision d92b59deb4419e87265552c6ced3bda1f55ba97a)
@@ -88,6 +88,10 @@
 			<td><fmt:message key="sysadmin.lessonFinishUrl" />:</td>
 			<td>${lessonFinishUrl}</td>
 		</tr>
+		<tr>
+			<td><fmt:message key="sysadmin.lti.consumer.monitor.roles" />:</td>
+			<td><html:text property="ltiToolConsumerMonitorRoles" size="30"/></td>
+		</tr>
 	</table>
 	
 	<div align="center">
Index: lams_build/lib/lams/lams.jar
===================================================================
diff -u -rf0baac16e87a8029d100301ad9c5390244a9f725 -rd92b59deb4419e87265552c6ced3bda1f55ba97a
Binary files differ
Index: lams_central/src/java/org/lamsfoundation/lams/web/LoginRequestLtiServlet.java
===================================================================
diff -u -r667587ecbee72f1d275271b80481f9472929361f -rd92b59deb4419e87265552c6ced3bda1f55ba97a
--- lams_central/src/java/org/lamsfoundation/lams/web/LoginRequestLtiServlet.java	(.../LoginRequestLtiServlet.java)	(revision 667587ecbee72f1d275271b80481f9472929361f)
+++ lams_central/src/java/org/lamsfoundation/lams/web/LoginRequestLtiServlet.java	(.../LoginRequestLtiServlet.java)	(revision d92b59deb4419e87265552c6ced3bda1f55ba97a)
@@ -124,14 +124,15 @@
 	}
 	ExtServerLessonMap lesson = integrationService.getLtiConsumerLesson(consumerKey, resourceLinkId);
 
-	//determine method based on role parameter
+	//Determine method based on role parameter. Monitor roles can be either LTI standard ones or tool consumer's custom ones set on a sysadmin page  
 	String method;
-	if (LtiUtils.isLearner(roles) && !LtiUtils.isStaff(roles) && !LtiUtils.isAdmin(roles)) {
-	    method = LoginRequestDispatcher.METHOD_LEARNER_STRICT_AUTHENTICATION;
-	} else if (lesson == null) {
-	    method = LoginRequestDispatcher.METHOD_AUTHOR;
+	boolean isCustomMonitorRole = LtiUtils.isToolConsumerCustomRole(roles,
+		extServer.getLtiToolConsumerMonitorRoles());
+	if (LtiUtils.isStaff(roles) || LtiUtils.isAdmin(roles) || isCustomMonitorRole) {
+	    method = (lesson == null) ? LoginRequestDispatcher.METHOD_AUTHOR : LoginRequestDispatcher.METHOD_MONITOR;
+
 	} else {
-	    method = LoginRequestDispatcher.METHOD_MONITOR;
+	    method = LoginRequestDispatcher.METHOD_LEARNER_STRICT_AUTHENTICATION;
 	}
 	
 	//provide empty lessonId in case of learner accesses LTI link before teacher authored it
Index: lams_common/conf/hibernate/mappings/org/lamsfoundation/lams/integration/ExtServer.hbm.xml
===================================================================
diff -u -rf0baac16e87a8029d100301ad9c5390244a9f725 -rd92b59deb4419e87265552c6ced3bda1f55ba97a
--- lams_common/conf/hibernate/mappings/org/lamsfoundation/lams/integration/ExtServer.hbm.xml	(.../ExtServer.hbm.xml)	(revision f0baac16e87a8029d100301ad9c5390244a9f725)
+++ lams_common/conf/hibernate/mappings/org/lamsfoundation/lams/integration/ExtServer.hbm.xml	(.../ExtServer.hbm.xml)	(revision d92b59deb4419e87265552c6ced3bda1f55ba97a)
@@ -161,6 +161,16 @@
             insert="true"
             column="time_to_live_login_request"
         />
+        
+        <property
+            name="ltiToolConsumerMonitorRoles"
+            type="java.lang.String"
+            update="true"
+            insert="true"
+            column="lti_consumer_monitor_roles"
+            length="65535"
+            not-null="false"
+        />
 
         <set
             name="extCourseClassMaps"
Index: lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch2040076.sql
===================================================================
diff -u
--- lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch2040076.sql	(revision 0)
+++ lams_common/src/java/org/lamsfoundation/lams/dbupdates/patch2040076.sql	(revision d92b59deb4419e87265552c6ced3bda1f55ba97a)
@@ -0,0 +1,8 @@
+-- Turn off autocommit, so nothing is committed if there is an error
+SET AUTOCOMMIT = 0;
+
+-- LDEV-4096 Add role management feature for LTI tool consumers
+ALTER TABLE lams_ext_server_org_map ADD COLUMN lti_consumer_monitor_roles text DEFAULT NULL;
+
+COMMIT;
+SET AUTOCOMMIT = 1;
Index: lams_common/src/java/org/lamsfoundation/lams/integration/ExtServer.java
===================================================================
diff -u -rf0baac16e87a8029d100301ad9c5390244a9f725 -rd92b59deb4419e87265552c6ced3bda1f55ba97a
--- lams_common/src/java/org/lamsfoundation/lams/integration/ExtServer.java	(.../ExtServer.java)	(revision f0baac16e87a8029d100301ad9c5390244a9f725)
+++ lams_common/src/java/org/lamsfoundation/lams/integration/ExtServer.java	(.../ExtServer.java)	(revision d92b59deb4419e87265552c6ced3bda1f55ba97a)
@@ -66,6 +66,11 @@
 
     /** persistent field */
     private Set extUserUseridMaps;
+    
+    /**
+     * Comma-separated list of roles that LTI tool consumer uses to indicate user monitor role
+     */
+    private String ltiToolConsumerMonitorRoles;
 
     /** default constructor */
     public ExtServer() {
@@ -212,7 +217,15 @@
     public void setExtUserUseridMaps(Set extUserUseridMaps) {
 	this.extUserUseridMaps = extUserUseridMaps;
     }
+    
+    public String getLtiToolConsumerMonitorRoles() {
+	return this.ltiToolConsumerMonitorRoles;
+    }
 
+    public void setLtiToolConsumerMonitorRoles(String ltiToolConsumerMonitorRoles) {
+	this.ltiToolConsumerMonitorRoles = ltiToolConsumerMonitorRoles;
+    }    
+
     @Override
     public String toString() {
 	return new ToStringBuilder(this).append("sid", getSid()).append("serverid", getServerid())
Index: lams_common/src/java/org/lamsfoundation/lams/integration/util/LtiUtils.java
===================================================================
diff -u -r700058382334580a4a183013cfaad01e0b0ca51a -rd92b59deb4419e87265552c6ced3bda1f55ba97a
--- lams_common/src/java/org/lamsfoundation/lams/integration/util/LtiUtils.java	(.../LtiUtils.java)	(revision 700058382334580a4a183013cfaad01e0b0ca51a)
+++ lams_common/src/java/org/lamsfoundation/lams/integration/util/LtiUtils.java	(.../LtiUtils.java)	(revision d92b59deb4419e87265552c6ced3bda1f55ba97a)
@@ -1,5 +1,6 @@
 package org.lamsfoundation.lams.integration.util;
 
+import java.util.Arrays;
 import java.util.LinkedList;
 import java.util.List;
 
@@ -37,6 +38,15 @@
 	
 	return hasRole(roles, rolesToSearchFor);
     }
+    
+    public static boolean isToolConsumerCustomRole(String roles, String toolConsumerCustomRoles) {
+	if (roles == null || toolConsumerCustomRoles == null) {
+	    return false;
+	}
+	
+	List<String> rolesToSearchFor = Arrays.asList(toolConsumerCustomRoles.split(","));
+	return hasRole(roles, rolesToSearchFor);
+    }
 
     /**
      * Return <code>true</code> if the user is a learner.