The Five User Roles
Super Administrator
Full access to all modules, settings, and billing. Typically the school proprietor or IT lead. There should be at most one or two of these per school.
School Administrator
Manages daily school operations — student records, attendance, finance, and communications. Cannot access billing or subscription settings.
Teacher
Enters CA and exam scores for assigned subjects, views class attendance, and accesses the e-learning portal. Scoped strictly to their assigned classes and subjects.
Parent / Guardian
Views their ward’s report cards, fee invoices, and school broadcasts. Can make fee payments through the parent portal. Read-only across all academic data.
Student
Views their own report cards, fee receipts, and e-learning content. Cannot see other students’ data or any administrative settings.
Permissions Reference
The table below shows which modules and actions are available to each role. A ✅ indicates full access, View means read-only access, and ❌ means no access.| Feature / Module | Super Admin | School Admin | Teacher | Parent | Student |
|---|---|---|---|---|---|
| School Profile & Settings | ✅ | ✅ | ❌ | ❌ | ❌ |
| Billing & Subscription | ✅ | ❌ | ❌ | ❌ | ❌ |
| Academic Year & Terms | ✅ | ✅ | ❌ | ❌ | ❌ |
| Grade Scale Configuration | ✅ | ✅ | ❌ | ❌ | ❌ |
| Class & Subject Management | ✅ | ✅ | ❌ | ❌ | ❌ |
| Invite & Manage Staff | ✅ | ✅ | ❌ | ❌ | ❌ |
| Student Enrollment | ✅ | ✅ | ❌ | ❌ | ❌ |
| CA Score Entry | ✅ | ✅ | ✅ (own subjects) | ❌ | ❌ |
| Exam Score Entry | ✅ | ✅ | ✅ (own subjects) | ❌ | ❌ |
| View All Student Scores | ✅ | ✅ | View (own class) | ❌ | ❌ |
| Attendance Management | ✅ | ✅ | View (own class) | ❌ | ❌ |
| Report Card Generation | ✅ | ✅ | ❌ | ❌ | ❌ |
| View Own Report Card | ✅ | ✅ | ❌ | View (ward) | View (own) |
| Fee & Invoice Management | ✅ | ✅ | ❌ | ❌ | ❌ |
| Make Fee Payments | ✅ | ✅ | ❌ | ✅ | ❌ |
| View Fee Receipts | ✅ | ✅ | ❌ | View (ward) | View (own) |
| School Broadcasts | ✅ | ✅ | ❌ | View | ❌ |
| E-Learning Portal | ✅ | ✅ | ✅ | ❌ | View |
| User Role Management | ✅ | ❌ | ❌ | ❌ | ❌ |
Teacher access to scores and attendance is always scoped to the classes and subjects they have been explicitly assigned to. A teacher cannot view or edit scores for a class they have not been assigned, even if they are in the same school.
How to Invite a Staff Member
Staff members — School Administrators and Teachers — are added to Edustream via email invitation. They receive a link to create their account and are immediately granted the permissions associated with their assigned role.Navigate to User Management
From the main dashboard, click Settings in the left sidebar and select Users & Roles. The user list displays all active accounts in your school.
Click 'Invite Staff'
Click the + Invite Staff button in the top-right corner. An invitation dialog opens.
Enter the staff member's details
Fill in the following fields:
- First Name and Last Name
- Email Address — this becomes their Edustream login email; it must be unique across the platform.
- Role — select either School Administrator or Teacher from the dropdown. (The Super Administrator role can only be assigned by another Super Administrator and should be granted sparingly.)
Send the invitation
Click Send Invite. Edustream sends an email to the address you provided with a secure, time-limited invitation link. The link expires after 72 hours — if the staff member does not accept in time, you can resend the invite from the Pending Invitations tab.
Invitation emails are sent from
noreply@edustream.app. Ask new staff members to check their spam or junk folder if they do not see the email within a few minutes.How to Assign or Change a User’s Role
You can update a staff member’s role at any time — for example, if a teacher is promoted to an administrative position.Find the user
Go to Settings → Users & Roles and search for the staff member by name or email address.
Open their profile
Click the staff member’s name to open their user profile panel on the right side of the screen.
Change the role
In the Role field, click the current role label to open the role selector. Choose the new role from the dropdown.
How Parents and Students Are Added
Parents and students are not added through the staff invitation flow. They are linked to the platform automatically during the student enrollment process.- Adding a Student
- Adding a Parent or Guardian
Complete the enrollment form
Enter the student’s personal details — full name, date of birth, gender, class, and any additional profile fields your school requires.
Create login credentials
In the Portal Access section, enter a login email address for the student (this can be a personal email or a school-issued address) and set a temporary password. The student will be prompted to change this password on first login.
Best Practices for Role Management
Following these guidelines will keep your Edustream account secure and your data well-organised as your school grows.Apply Least Privilege
Grant users the minimum role needed for their job. A teacher who occasionally helps with administration does not need a School Administrator role — use the Teacher role and ask a School Administrator to handle admin tasks.
Limit Super Administrators
Restrict the Super Administrator role to one or two trusted individuals (e.g., the proprietor and the IT lead). This role has access to billing and can delete school data — it should not be used as a general admin account.
Review Users Each Session
At the start of each academic session, audit your user list. Deactivate accounts for staff who have left the school and ensure new hires have been properly invited before term begins.
Use Unique Email Addresses
Every Edustream account requires a unique email address. Avoid creating shared or role-based email accounts (e.g.,
admin@school.edu) for individual users — shared credentials make auditing and accountability impossible.School Profile Setup
Configure your school name, logo, and branding before inviting your team.
Academic Year Setup
Set up terms, grade scales, and assign teachers to subjects and classes.