Access control in SchoolDeck is per field rather than per screen. A class teacher sees their own sections’ attendance and marks and never another branch’s fee ledger; an accountant sees ledgers and not medical notes. Every role is built from fields rather than chosen from a fixed list.
Permissions constrain what the software shows. They do not stop somebody sharing a screenshot, which is why the audit log exists alongside them.
Screen-level permissions are the usual implementation and they fail in the same way every time: the screen a class teacher needs contains one field they should not see, so either they get the whole screen or they get none of it. In practice they get the whole screen.
A student record holds attendance, marks, a fee ledger, guardian contact details, category, medical notes and sometimes a custody arrangement. Almost nobody in the school should see all of those. A class teacher needs contact details and not the ledger; an accountant needs the ledger and not the medical notes; the nurse needs the reverse.
Sensitive fields default to the narrowest access rather than the widest, and widening one is a deliberate act that is itself logged.
A role is not only what you can see but whose. A class teacher’s permission applies to their own sections; a branch accountant’s to their own branch. Without scoping, "teacher" means every teacher can read every student in the group, which is how most systems actually behave once a group grows.
Phrased the way they arrive, answered so each one stands on its own.
Yes, from fields rather than from a fixed list, because no fixed list survives contact with a real school’s staffing.
Google Workspace, Microsoft 365 and SAML 2.0, with SAML per branch OU for groups. Parents and students use OTP.
Only roles explicitly granted it. These default to the narrowest access, and each grant is recorded in the audit log.
Checked by the Implementations desk on 6 September 2026. Corrections go in the page, dated, rather than quietly.
Pricing is on the page, in the open, with the counting rule written next to it. Nobody has to book a call to find out what it costs.
See pricingForty minutes with an implementation engineer — your classes, your fee heads, your grading scheme, entered as we go. No slides, no sample school.