Reference

Permissions reference

Every permission in the catalogue, what it unlocks, and which default roles hold it.

Written for School admin
On this page

This page has no sections.

Every permission in Alviyora, what it unlocks, and which of the four default roles holds it. This is the list you tick from when building a custom role.

A = Admin · T = Teacher · L = Learner · G = Guardian

Note

Admin holds every permission listed here except View Parents Portal, which belongs to guardians. Custom roles hold what you tick, plus the baseline below.

What everybody gets anyway

Three permissions are not yours to grant or withhold. Every account at the school holds them, whatever its role, and they show in the matrix ticked and locked:

PermissionWho holds itWhy it is not optional
View AnnouncementsEveryoneAnnouncements already carry an audience — everyone, staff, learners or guardians — so who sees a given notice is decided when it is written. A role gate on top of that only ever meant “this person cannot be told anything”.
View SettingsEveryoneThe settings page is the person’s own account: their password, their username, their signed-in devices. Nobody should need permission to change their own password.
View AttendanceStaff roles onlyClocking in and out, and seeing your own attendance. A caretaker who cannot clock in cannot be paid. Learners and guardians do not get this one.

This exists because a role you create starts with nothing ticked. A school that added General Worker or Janitor and assigned somebody to it had just created an account that could sign in, see an empty sidebar and a “No access to the dashboard” message, and do nothing at all — including ask for help, since they could not read an announcement or change the password they had been given.

Everything else is still yours to decide. The line is: your own account, and what the school is telling you on one side; everybody else’s data on the other. Seeing other people, marks, learners or finance stays in the matrix.

Staff roles versus the others

The attendance half keys off the staff role switch you set when creating the role — the same one that decides whether people holding it appear on the Staff page. Tick it for a caretaker, a driver, a bursar; leave it off for anything learner- or guardian-shaped.

General

PermissionWhat it unlocksATLG
View DashboardAccess the dashboard✅✅✅✅
View Parents PortalAccess the parents portal———✅

Attendance

PermissionWhat it unlocksATLG
View AttendanceThe attendance page, and clocking in and out✅✅——
View Attendance ReportsAttendance reports for all staff, including missing clock-outs✅———
Manage Staff AttendanceClock staff in or out on their behalf, and correct missing clock-outs✅———
Take Learner AttendanceMark the daily register for your classes✅✅——
View Learner AttendanceLearner attendance reports, scoped to your classes✅✅——

Users

PermissionWhat it unlocksATLG
View StaffThe staff list✅———
Manage UsersRegister staff, learners and guardians✅———
Manage RolesCreate custom roles and assign permissions✅———
View LearnersThe learner list✅✅——
View Basic ProfilesThe profile card of members of your school✅✅✅✅
View Full ProfilesAll profile information, sensitive fields included✅———
Edit Learner ProfilesEdit profiles of learners in your classes✅———
View NotesRead staff notes about learners and staff✅✅——
Manage NotesWrite, edit and delete staff notes✅✅——

Academics

PermissionWhat it unlocksATLG
View AcademicsAcademic results and assessments — the staff-facing capture screens✅✅——
View Own ResultsYour own — or your child’s — subjects, assessments and marks✅—✅✅
Manage Academic SettingsGrades, sections, subjects, academic years, teacher assignments✅———
Manage Grade SubjectsAssign subjects to grades✅———
Manage EnrollmentsEnrol learners in subjects✅———
Manage PromotionGenerate and decide year-end results and promotions✅———

Why View Academics and View Own Results are separate

View Academics is the staff-facing capture permission — it opens the screens where marks are entered for everybody. View Own Results is a much narrower claim: this account’s own results, never anyone else’s.

Merging them would mean either handing learners the capture screens, or teaching one permission to mean two different things depending on who holds it.

Timetable

PermissionWhat it unlocksATLG
View TimetableView the timetable✅✅✅✅
Manage TimetableCreate and edit the timetable✅———
Generate TimetableRun the generator and publish for the whole school✅———

Generate Timetable cannot be delegated

It is restricted and does not appear in the permission matrix at all. It stays with the Admin role specifically.

Manage Timetable covers editing one class’s timetable and is delegable to anyone sensible. Generating replaces the whole school’s timetable in one action — which is not something that should be available through a tick box, however senior the role.

Homework

PermissionWhat it unlocksATLG
View HomeworkView homework✅✅✅✅
Manage HomeworkCreate and edit homework✅✅——

Communication

PermissionWhat it unlocksATLG
View AnnouncementsView announcements✅✅✅✅
Manage AnnouncementsCreate and edit announcements✅———

Sending an SMS is not a separate permission — any member of school staff who can open a learner’s profile can reach that learner’s guardian.

Settings

PermissionWhat it unlocksATLG
View SettingsThe settings page✅✅✅✅
Manage SettingsEdit school hours and school settings✅———
Manage SchoolThe school profile — name, contact details, address, hours✅———
View Action LogThe record of who did what at the school✅———

Finance

PermissionWhat it unlocksATLG
View FinanceAccess finance features✅——✅
Manage FinanceFee structures and learner fee assignments✅———
Capture PaymentsRecord manual EFT and cash fee payments — the bursar’s✅———
Manage BillingYour school’s own Alviyora subscription✅———
View BookkeepingThe school’s accounts, journal and financial reports✅———
Manage BookkeepingRecord income, expenses and journal entries; manage accounts and financial years✅———

Building a role from this

Three worked examples:

Principal — Teacher’s set, plus View Staff, View Attendance Reports, View Action Log, View Full Profiles, and Manage Announcements. Not Manage Roles unless they should be able to change their own access.

Bursar — View Dashboard, View Settings, View Learners, View Basic Profiles, View Finance, Manage Finance, Capture Payments. Nothing academic.

Head of Department — Teacher’s set, plus View Academics across the department and Manage Announcements.