Skip to content

Roles & Permissions ​

The admissions system uses a role-based access control (RBAC) model. Roles are collections of permissions that determine what actions a user can perform. You can create custom roles tailored to your school's organizational structure.

Configuring Roles & Permissions

Coming soon — an interactive walkthrough will be added here.

Accessing Role Management ​

  1. Navigate to Configuration > Users & Roles.
  2. Select the Roles tab.

Understanding Roles ​

A role is a named set of permissions. For example:

  • Admissions Manager -- Full access to all features.
  • Admissions Officer -- Can manage leads, forms, and activities but cannot configure settings.
  • Viewer -- Read-only access to lead data and reports.

System Roles ​

The system comes with predefined access levels:

  • Manager (ROLE_MANAGER) -- Full platform management access.
  • Full Access (ROLE_ACL_ADMISSIONSCRM_FULL) -- Complete admissions module access.
  • Basic Access (ROLE_ACL_ADMISSIONSCRM_BASIC_ACCESS) -- Read and basic operations.
  • Config Access (ROLE_ACL_ADMISSIONSCRM_CONFIG_ACCESS) -- Configuration and settings write access.

Custom Roles ​

You can create custom roles that combine specific permissions:

  1. Click New Role on the Roles tab.
  2. Enter a Role Name (e.g., "Admissions Coordinator").
  3. Configure permissions using the permission groups (see below).
  4. Click Save.

Permission Groups ​

Permissions are organized into logical groups:

Leads ​

PermissionDescription
leads.viewView lead list and detail pages
leads.createCreate new leads manually
leads.editEdit lead details and CRM fields
leads.deleteDelete leads
leads.assignAssign leads to staff members
leads.transferTransfer leads between pipelines
leads.exportExport lead data

Forms ​

PermissionDescription
forms.viewView form list and submissions
forms.createCreate new forms
forms.editEdit form design and settings
forms.deleteDelete forms
forms.publishPublish/unpublish forms

Contracts ​

PermissionDescription
contracts.viewView contract list and details
contracts.createCreate new contracts
contracts.sendSend contracts for signing
contracts.completeMark contracts as complete
contracts.voidVoid active contracts

Configuration ​

PermissionDescription
settings.viewView configuration pages
settings.editModify settings and configurations
settings.unlock_sectionsLock/unlock protected configuration sections

Users & Roles ​

PermissionDescription
users_roles.viewView user list and role assignments
users_roles.manageCreate/edit roles and assign to users

Permission Matrix ​

The Permissions tab provides a visual matrix showing all roles and their permissions:

  1. Navigate to Users & Roles > Permissions tab.
  2. The matrix displays:
    • Rows: Permission groups and individual permissions.
    • Columns: Each configured role.
    • Checkboxes: Whether a role has each permission.
  3. Check or uncheck permissions to modify roles.
  4. Click Save to apply changes.

Using the Permission Matrix ​

  1. Scan across a row to see which roles have a specific permission.
  2. Scan down a column to see all permissions a specific role has.
  3. Make changes by toggling checkboxes.
  4. Click Reset to discard unsaved changes.
  5. Click Save to apply all changes at once.

TIP

The permission matrix is the most efficient way to compare permissions across roles and make bulk changes. Use it for auditing access levels.

Editing a Role ​

  1. Find the role in the Roles tab.
  2. Click Edit.
  3. Modify the role name or permissions.
  4. Click Save.

Deleting a Role ​

  1. Find the role in the Roles tab.
  2. Click Delete.
  3. Confirm the deletion.

WARNING

Deleting a role removes it from all users who had it assigned. Those users will lose the permissions that role provided. Ensure no users depend solely on the role being deleted before removing it.

Best Practices ​

  1. Start with few roles -- Begin with 2-3 roles (Admin, Officer, Viewer) and add more only when needed.
  2. Name roles descriptively -- Use names that clearly indicate the role's purpose (e.g., "Campus Tour Coordinator" not "Role 3").
  3. Audit regularly -- Review the permission matrix quarterly to ensure roles align with current responsibilities.
  4. Document your roles -- Keep a record of what each role is for and who should have it.

Kinderpedia Admissions Help Center