Access is granted per module and per action. A role group is a reusable bundle — 'Accountant', 'Class teacher' — and a direct grant is for the one person who needs something extra.
Somebody with no grants can sign in but sees nothing. That is deliberate: an account exists before its permissions do.
- 1Add teachers and office staff in the staff directory.
- 2Create role groups for the jobs your school actually has.
- 3Put people in groups, or grant a module directly where the group does not fit.
Worth knowing
- A module grant is permission over other people's records. Seeing your own leave or your own payslip does not need one.