Logins, roles & permissions
Who can see what — and how to keep it that way.
Open Roles & users: create the user with name, email and a temporary password, assign a role, and grant campus access (specific campuses, or all).
A role is a bundle of permissions: *owner* can do everything; *accountant* sees money screens; *front_desk* sees inquiries and visitors; *teacher* sees their sections. Screens, actions, exports and every report in the Report Center follow these permissions — there is nothing separate to configure.
They are different axes. Permissions say what kind of thing you may do; campus grants say whose data you may do it to. A campus-1 accountant with full fee permissions still cannot see campus-2 challans.
Each role enters only its own portal — an admin cannot open the teacher or student portal, and vice versa. Students and parents get access when their accounts are linked (student user link, guardian link).
Encourage staff to enable two-factor login from their profile (Configurations → Security). Changing a password revokes every other signed-in device. Every sensitive action lands in the audit log.