Scope student access by campus, assigned teaching group and legitimate work responsibility.
Roles and permissions
Responsibilities and decision rights for registrars, bursars and academic operations teams running schools, colleges and training institutions.
How permissions work
3 rulesRegistrar owns admission and enrollment decisions; Bursar owns fee-policy exceptions.
Preserve dated correction history and prevent preparers from approving their own exceptions.
The roles
Registrar
Owns admissions decisions, enrollment and controlled student changes. Permissions: Manage Students, Enrollments, GroupMemberships; View Applications; Approve Applications; Access enrollment reports
Admissions Officer
Prepares applicant records and admission evidence. Permissions: Manage Applications; View Programs, AcademicPeriods; Access application reports
Bursar
Owns student charges, concessions and collection reconciliation. Permissions: Manage FeePlans, Charges, Receipts; Approve FeePlans; View Enrollments; Access fee reports
Academic Coordinator
Owns class allocation, faculty load and published timetables. Permissions: Manage ClassSessions, FacultyAssignments, StudentGroups, Rooms; Approve ClassSessions; View Enrollments; Access timetable reports
Faculty
Records attendance for assigned classes. Permissions: Manage Attendance; View assigned ClassSessions, Enrollments; Access assigned attendance reports
Finance Manager
Reviews campus expenditure and accounting close. Permissions: Manage Accounts, JournalEntries, JournalLines; Approve PurchaseRequests, JournalEntries; View Charges, Receipts; Access finance reports
Rehearse access
A duplicate payment event must not settle the same charge twice. A student transfer must preserve prior enrollment and fee history. A faculty or room overlap must block timetable publication until resolved. A faculty account must not access another teaching group’s restricted student notes. Test with ordinary role accounts, including an out-of-scope organization, a preparer trying to approve their own work, and a disabled staff identity.