On this page0
Unfamiliar word? See Glossary: words used in these docs. Looking for the tasks in order? Begin at Start Here.
Reference
Included in: Team and Advanced. Which Plan Includes What
Training Courses
This page describes what a course is made of, knowledge checks, the starter library, assigning, reminders and renewals, and how completion is recorded. Courses are on Team and Advanced. This page is part of the reference Training, Phishing & Policy Signing.
What It Does
- What a course is made of. Parts of text read one per page, video, and optionally a link to training held elsewhere. A video is one of the ready-made ones shipped with the product, a link to your own video, or an uploaded file. Uploaded video is part of the preview and not yet validated end-to-end.
- How a course is marked done. You choose one of four ways: the person presses a button, ticks that they have read and understood, passes a knowledge check, or uploads a certificate.
- Knowledge checks. A set of multiple-choice questions, up to 30. The pass mark is a whole number from 50 to 100, and 80 when left empty. Answers are marked on the server. After a fail the person is told their score and how many answers were wrong, never which ones.
- The starter library. 13 ready-made courses. Nothing is added by itself, and a course you add is assigned to nobody until you assign it. They are starting texts: read each one and make it yours first.
- Assigning. A course goes to everyone, a department or named people, and each person is told by email and in the app. A course can also be given to new joiners automatically.
- Reminders and renewals. A daily run reminds the person 7 days before the due date, on the day, the day after, and then every week until it is done. From a week late, the person’s manager is told too. A course can be set to come back for redoing after a number of months.
- Completion. The roster lists every assignment, with a CSV download and, for one course, a signed roster as a PDF. A manager sees what is open and overdue for the people below them, read-only, and cannot complete training for them.
Courses
TrainingCourses lists every course with how many people have it, how many are done and how many are overdue. “New course” opens an editor of five steps, starting with “Basics” and ending with “Preview”, which plays the course as an employee will see it without saving or recording anything. A course needs a “Title”; everything else is optional. Switching “Active” off retires a course: it can no longer be assigned or reminded about, what was still open on it leaves people’s lists, and what was completed stays as history.
What A Course Is Made Of
Parts To Read
Video
Must Watch
How It Is Marked Done
Knowledge Checks
A knowledge check is a set of multiple-choice questions, the only kind of question there is. A check holds up to 30 questions. Each has between 2 and 6 answers, exactly one of them correct, and an optional short example shown above it. The person sees one question per page, then a page to review their answers before sending them.
Pass Mark
Question Pools
Attempts
After A Fail
The Starter Library And Topics
The Library
Topics
Assigning, Reminders And Renewals
Assigning
Joiners And Standing Audiences
Reminders
Renewals
Completion, The Roster And The Team View
Who Can Mark It Done
Certificates
The Roster
A Manager's Team View
If something here is not working as you expect, start with When something goes wrong.
The plain explanation is above. This part is for IT and developers: the exact settings, permission names, API addresses and data fields behind it. Closed: select the heading above to open it. While it is closed, your browser’s find-on-page (Ctrl+F or Cmd+F) does not search this part.
Worked Example: Mark Your Own Training Done
A write made with the signed-in session cookie, using the same host placeholder as the API reference. A cookie-authenticated write must send an Origin header for your instance’s own address, or the gateway answers 403 CSRF check failed: missing or untrusted Origin. before the route runs. The same call with Authorization: Bearer $ZX_TOKEN in place of the cookie needs no Origin.
# 57 is the id of one of your own assignments, from GET /user-management/training/mine.
curl -X POST https://<your-instance>-api.zonitix.com/api/v1/user-management/training/assignments/57/complete \
-H 'Origin: https://<your-instance>.zonitix.com' -H 'Content-Type: application/json' \
--cookie '__Host-token=<session-jwt>' -d '{ "acknowledged": true }'
# 200. Sending it again is safe: nothing new is recorded, and the item comes back as it is with "course": null.
{ "assignment": { "id": 57, "courseId": 12, "userId": 7, "dueDate": "2026-10-31",
"status": "completed", "completedAt": "2026-10-10T09:30:00.000Z",
"lastCompletedAt": "2026-10-10T09:30:00.000Z", "expiresAt": "2027-10-10", "overdue": false,
"acknowledgedAt": "2026-10-10T09:30:00.000Z", "hasCertificate": false,
"quizTriesLeft": null, "quiz": null, "course": { "id": 12, "title": "...", ... } } }
# 400 "Confirm that you have read and understood it." when the item asks for it and acknowledged is missing.
# 404 "Assignment not found." for an assignment that is not yours, unless you hold manage_employee_training.
# 402 "Subscription lapsed" when the subscription has lapsed. Values above are illustrative.