School RBAC - Roles & Access Control Guide

Roles and access control

How Schoolyi uses roles, user types, and capability paths to gate navigation and API operations.

This platform & access guide covers school software role based access control for K-12 day schools. Whether you are evaluating cloud school management software or configuring Schoolyi after go-live, you will find practical steps for RBAC for schools, school user roles explained - written for administrators and staff, not developers.

Last updated July 24, 2026

Every authenticated user has a role (permission template) and a user type (student, staff, parent, etc.). The sidebar and API routes evaluate capabilities - dot-separated paths like modules.resources.library.view - before showing actions or mutating data.

Request flow

User types vs roles

Concept	Controls	Examples
User type	Portal experience and default landing	Student → /my-class; Parent → /parent-dashboard
Role	Which staff modules appear in nav	Principal, Teacher, Librarian, Finance variants
Teacher scoping	Data limited to assigned classes/subjects	Where the module supports class-subject assignment
Committee membership	Extra workflow access without changing base role	Exam papers, admissions review

Where to manage access

/roles - permission templates per role
/roles/[id] - fine-grained capability toggles
/users and /users/[id] - assign role, deactivate, reset access
Committee membership - grants exam or admissions participant UIs

Common questions

Quick answers in plain language.

What is school software role based access control?+

How Schoolyi uses roles, user types, and capability paths to gate navigation and API operations. This is a core topic in Platform & access on Schoolyi.

How do I set up roles and access control in school management software?+

Follow the steps in this guide during roles, academic spine, and school settings. Start with getting-started docs if you are new to Schoolyi, then apply the workflows here for your school year.

Who manages roles and access control at a typical K-12 school?+

Usually platform & access and front-office staff responsible for school software role based access control. Teachers and finance may have scoped access depending on your role configuration.

Does Schoolyi support RBAC for schools?+

Yes. Schoolyi is a cloud school management system (SMS) with connected modules on one student roster and academic calendar. See related guides below or contact us for a demo focused on school software role based access control.