Role-based access for school device management

By the SkieOS team · Updated 11 November 2026 · 5 min read

In short

Role-based access gives each person a dashboard scoped to their level: teachers manage a class, section heads a branch, principals a school and owners everything. It speeds up change and limits exposure.

The levels

RoleTypically manages
TeacherTheir class and its devices
Section head or HODAll classes in their branch
PrincipalThe whole school
Organisation ownerEvery school and branch
Hostel wardenHostel groups and night mode

Why it helps

  • Teachers change apps for a lesson without raising a ticket
  • Leaders see status across branches
  • People cannot see or change what is not theirs
  • Changes are recorded against a named person

How rules combine

Rules set at the top flow down. A branch or class can refine them within what the level above allows. The most specific level applies last, which keeps behaviour predictable.

Designing your roles

Start from how your organisation already works. Give people the lowest level that lets them do their job, and review access when staff change.

Frequently asked questions

Can a teacher see other classes?

No. A teacher's dashboard is scoped to their own class.

Can leadership see everything?

Owners and principals see the levels beneath them, according to their role.

Can access be changed?

Yes. Roles can be assigned and updated as staff change.