Skip to main content
Schoolyi

Auth, RBAC, sessions, and audit export

Security & data

Secure sign-in, role-based access on every route, session management, activity audit export, and clear data-handling boundaries for school evaluators. Schools trust SMS vendors with student records. Schoolyi documents authentication, capability paths, session policy, and activity logging so IT teams and leadership evaluate security before rollout — not after an incident.

School IT administrator managing secure access and roles

Outcomes

What changes when security & data is live

Practical results schools report after rolling out security & data inside platform & access.

  • Password policy and email verification

    Sensitive modules stay gated to authorised roles

  • Role-based access on pages and API routes

    Leadership exports activity when investigating changes

  • Session management and sign-out controls

    IT teams review RBAC before go-live

  • Activity log with CSV export for audit

    Parent magic links reduce password support load

Key capabilities

Everything included in this capability, from daily workflows to exports your team relies on.

  • Password policy and email verification
  • Role-based access on pages and API routes
  • Session management and sign-out controls
  • Activity log with CSV export for audit
  • PWA shell and offline asset boundaries
  • Magic-link sign-in for parent onboarding

Who uses this

Role-scoped workspaces so each team sees only the tasks they own.

  • Platform admins
  • IT coordinators
  • School leadership

Full module

Platform & access

Every user gets the right access from day one. Schoolyi gives administrators fine-grained control over who can view and change student records, fees, exams, and settings, so each role sees a workspace built for their job.

Explore Platform & access

Workflow

How teams run security & data week to week

A typical path from setup through daily use on Schoolyi.

  1. 01

    Password policy and email verification

    Part of the Security & data workflow on Schoolyi, connected to roster, calendar, and role permissions.

  2. 02

    Role-based access on pages and API routes

    Part of the Security & data workflow on Schoolyi, connected to roster, calendar, and role permissions.

  3. 03

    Session management and sign-out controls

    Part of the Security & data workflow on Schoolyi, connected to roster, calendar, and role permissions.

  4. 04

    Activity log with CSV export for audit

    Part of the Security & data workflow on Schoolyi, connected to roster, calendar, and role permissions.

Deep dive

Built for school operations, not generic ERP

Long-form context for evaluators comparing capabilities during an SMS rollout.

School IT administrator managing secure access and roles

Why schools upgrade security & data

Schools trust SMS vendors with student records. Schoolyi documents authentication, capability paths, session policy, and activity logging so IT teams and leadership evaluate security before rollout — not after an incident.

School principal reviewing reports in a modern office

Connected to platform & access

Secure sign-in, role-based access on every route, session management, activity audit export, and clear data-handling boundaries for school evaluators. Because security & data lives inside platform & access on Schoolyi, teams stop reconciling exports between spreadsheets and the parent portal.

Questions, answered

Straightforward answers for visitors evaluating the product.

Who typically runs security & data day to day?+

Platform admins, IT coordinators, School leadership own daily workflows while platform & access coordinators review setup and exports when needed.

How does security & data connect to the academic calendar?+

Secure sign-in, role-based access on every route, session management, activity audit export, and clear data-handling boundaries for school evaluators. Because it shares roster and calendar data with platform & access, teams do not maintain parallel date lists or exports.

Can we roll out security & data after go-live?+

Yes. Schools often launch platform & access foundation data first, then enable security & data when coordinators are ready.

Is training required for every role?+

Role-scoped workspaces show only the tasks each team needs for security & data. Most schools run a short coordinator session plus self-serve operator guides.

Students walking together across a school campus at sunset

See Security & data in a live walkthrough

We'll show how security & data fits your school's platform & access workflows and which teams benefit first.

Already using Schoolyi? Sign in