As admin, go to Site administration ► Users ► Permissions ► User policies. Select all the fields Create a new user (to be a student) with some information in a few fields Add a teacher to a course Log in as that teacher. Enrol the student user in that course. In the enrolled users list click the icon of the student You should be able to see all the user's fields that were filled in , including their email Remove the site:viewuseridentity capability from the teacher role Go back to the student's course profile You should not see the user's email Go back and add the site:viewuseridentity capability back to the teacher Go to Site administration ► Users ► Permissions ► User policies Remove email from the showuseridentity setting Go back to the student's course profile You should not see the user's email Go back and tick email on showuseridentity again. Go to the student's full profile You should not be able to see the user's fields , and not their email either Enrol another student and log in as that student View the first student's profile. You should not be able to see the hidden fields Create a user and give them the manager role in the site context. Enrol them as a student in the same course you used before Check that they can see the hidden fields both on the user profile, and on the course profile Edit the student role and give it the user:viewhiddendetails permission (set to allow) Log in as student Go to another student's page Make sure you can view their details You may want to empty the hiddenuserfields list and get rid of the user:viewhiddendetails capability from student now so that you don't have weird results in a test many years from now