EC
EduCodexFinance OSEduCodex Demo Education Trust

Roles & RBAC Access Studio

Granular permission governance, contextual multi-campus scoping, and maker-checker matrix.

Proof: Multi-Scoped Contextual User Role Assignment

EduCodex decouples user identity from a single global role. A user holds contextual privileges per campus.

FM

Farhan Merchant (accountant.rajkot@educodex.demo)

Holds dual roles across different trust campuses:

Campus: EduCodex Demo School — Rajkot

Role: ACCOUNTANT

Write: Journals, Vouchers, Reconciliation, Closures

Write Access
Campus: EduCodex Demo School — Ahmedabad

Role: AUDITOR

Read-Only: Statements, Ledgers, Audit Logs

Read Only

System & Custom Roles

Select a role to inspect its granular permission assignments.

Organization OwnerSystem

Full administrative and financial governance across all trust campuses

PrincipalSystem

Executive visibility, institutional dashboards, fee approvals and audit access

AccountantSystem

Double-entry journals, bank reconciliation, expense booking, trial balance

CashierSystem

Rapid fee collection, cash shift management, cash handover, receipt issuance

Cash CustodianSystem

Physical vault cash, cashier handovers, staff advances, denomination counts

School AdministratorSystem

School master settings, academic/fiscal years, user provisioning, RBAC matrix

AuditorSystem

Strict read-only inspection of ledgers, financial statements, and audit logs

Permissions Assigned to Accountant (ACCOUNTANT)

10 permissions active

org.settings.manage

org > settings > manage

Denied
school.settings.manage

school > settings > manage

Denied
school.structure.manage

school > structure > manage

Denied
users.manage

users > manage

Denied
audit.logs.view

audit > logs > view

Granted
accounting.coa.manage

accounting > coa > manage

Granted
accounting.journal.create

accounting > journal > create

Granted
accounting.journal.approve

accounting > journal > approve

Denied
accounting.period.manage

accounting > period > manage

Denied
accounting.reports.view

accounting > reports > view

Granted
student.finance.view

student > finance > view

Granted
student.fee.assign

student > fee > assign

Denied
fee.collection.collect

fee > collection > collect

Denied
fee.receipt.reprint

fee > receipt > reprint

Granted
fee.concession.approve

fee > concession > approve

Denied
fee.refund.process

fee > refund > process

Denied
cash.shift.manage

cash > shift > manage

Denied
cash.handover.initiate

cash > handover > initiate

Denied
cash.handover.accept

cash > handover > accept

Granted
bank.reconcile

bank > reconcile

Granted
expense.create

expense > create

Granted
expense.approve

expense > approve

Denied
advance.manage

advance > manage

Granted