Access Policies

Control what each staff member can access using policies and groups.

Access Policies follow the AWS IAM model. Define policies, attach them to groups, add users to groups.

How It Works

1. Create a Policy — select which modules it grants (checkboxes)
2. Create a Group — attach one or more policies (multiple supported)
3. Add Users to Groups — users get combined permissions from all policies in all their groups

Key Features

• Multiple policies per group — combine focused policies on one group
• Multiple groups per user — permissions merged across groups
• Default-deny — tabs hidden until explicitly granted
• Roles still work — Educator and Viewer roles apply when user is not in any group

Available Permissions

Academics: Student Grades, Generate Report Cards, View Reports, Attendance, Analytics, Timetable, Academic Calendar

Students: Register Student, View Students, Parent Communications, Promote Students

Educators: Onboard Educator, View Educators, Educator Documents, Educator Attendance

Finance: Payments, Payment History, Payment Analytics

Other: Inventory, Academic Settings, CBT, Exam Prep