Local Settings proof

View-as-role access report

Review view-as-role previews, role-template minimization, temporary grants, restricted designations, support access, and audit evidence.

Otto Fixture BPPE Career School - access report

School Administrator · Sam Director

People and access proof

View-as-role preview and access report

Local proof data for confirming what each role or person can see before access is granted. The report shows minimized preview payloads, blocked fields, task-bound temporary grants, restricted-record designations, Otto support access, and audit evidence.

Preview requires step-up

View-as-role does not switch accounts. The proof records a step-up event, hides fields the target role cannot see, and keeps production impersonation disabled.

Role previews

Preview scenarios for staff, admin, and Otto support boundaries.

Blocked fields

Hidden fields stay out of the proof payload and UI preview.

Temporary grants

Task-bound access with named records, fields, and end times.

Audit events

Preview, grant, denial, support, and expiry events are visible.

Disabled actions

Production impersonation and bypass actions stay disabled.

Role preview

View-as-role preview

These preview cards show the exact allowed fields and hidden fields for a role or person before the administrator grants access.

Maya Rivera - Student 360

Avery Front Desk as Receptionist and scheduler

Allowed, minimized

Scope: Front desk directory and appointment scope
Server proof: API preview payload contains only directory fields for front desk.
Banner: Directory privacy: do not confirm or deny enrollment.

Visible fields

Name
Phone
Email
Photo
Advisor
Appointments

Hidden fields

Grades
Balances
Financial aid
Health and accommodations
Private notes
SSN

Maya Rivera - Medical Terminology section

Jordan Lee as Instructor

Allowed, minimized

Scope: Own enrolled course section only
Server proof: Course enrollment scope allows only the instructor's own section.
Banner: Instructor preview: own course data only.

Visible fields

Roster name
Attendance for own section
Posted grade for own course
Approved accommodation letter

Hidden fields

Full Student 360
Account balance
Financial aid
Counseling notes
Title IX record

Omar Nguyen - Not enrolled in Jordan's section

Jordan Lee as Instructor

Blocked

Scope: No legitimate educational interest for this course
Server proof: URL edit and API call return no access.
Banner: No access to this student in the active instructor role.

Visible fields

No student record fields

Hidden fields

Directory
Attendance
Grades
Documents
Messages
Private notes

Four graduates in diploma mailing task

Casey Admin Assistant with task grant

Task grant

Scope: Temporary task grant from registrar lead
Server proof: Grant binds named records, named fields, task id, and expiry.
Banner: Task access ends when the diploma mailing task is done.

Visible fields

Legal name
Mailing address
Credential type
Diploma packet status

Hidden fields

Grades
Balances
Aid records
Health records
Private notes

Daniel Cho - Completion audit

Avery Registrar

Allowed, minimized

Scope: Registrar records, credentials, and hold decisions
Server proof: Registrar receives records data but not full aid, SSN, or restricted records.
Banner: Registrar preview: credential data, limited aid context only.

Visible fields

Completion audit
Transcript requests
Credential source fields
Holds
Grade-change evidence

Hidden fields

Full financial aid package
SSN
Health records
Accommodation records
Private notes

Maya Rivera - Student 360 deep link

Sam Director as School administrator

Settings only

Scope: Account administration without student-record role
Server proof: Admin rights manage access but do not automatically grant student records.
Banner: Administrator preview blocked: no student-record role.

Visible fields

Settings
Users
Roles
Security

Hidden fields

Student 360
Grades
Balances
Documents
Private notes

BPPE Career School setup support

Otto support with school-granted access

Support grant

Scope: Support grant active until Oct 13, 2026 at 5:00 PM
Server proof: Support access is time-limited, visible to administrators, and logged.
Banner: Otto support access is active and expires automatically.

Visible fields

Setup status
Settings health
Support case context
Feature flags

Hidden fields

Full payment data
SSN
Private notes
Restricted records

Access report

Role template access report

Directory and contact

Front desk: Edit named contact fields
Assistant: Limited through task
Instructor: Own students
Finance: View
Registrar: Edit
Director: View

Front desk never receives program status, grades, or balances.

Attendance and grades

Front desk: None
Assistant: Task grant only
Instructor: Own sections
Finance: Attendance dates only
Registrar: Approve
Director: View

Instructor scope is section-bound and blocks URL edits.

Accounts and payments

Front desk: None
Assistant: Task grant only
Instructor: None
Finance: Approve
Registrar: Holds only
Director: View

Registrar sees hold status, not full account detail.

Financial aid records

Front desk: None
Assistant: None
Instructor: None
Finance: Disbursements only
Registrar: None
Director: View

Financial aid use limits block broad role-template access.

Restricted records

Front desk: None
Assistant: None
Instructor: Approved accommodation letter
Finance: None
Registrar: None
Director: None

Health, counseling, Title IX, and accommodations need designations.

Settings and security

Front desk: None
Assistant: None
Instructor: None
Finance: Own area
Registrar: Own area
Director: Approve

Admin settings access is separate from student-record access.

Temporary access

Task-based temporary grants

Mail four diploma packets

Casey Admin Assistant - granted by Avery Registrar

Task grant

Expires: Oct 15, 2026 at 5:00 PM
Auto ends: Task is marked done or expires
Cannot exceed grantor: Yes
Every open logged: Yes

Named records

Daniel Cho
Maya Rivera
Priya Shah
Lina Gomez

Allowed fields

Legal name
Mailing address
Credential type
Packet status

Clean duplicate lead documents

Casey Admin Assistant - granted by Marcus Admissions Manager

Task grant

Expires: Today at 4:00 PM
Auto ends: Duplicate cleanup task is closed
Cannot exceed grantor: Yes
Every open logged: Yes

Named records

BrightCare lead packet
Omar Nguyen lead packet

Allowed fields

Lead name
Uploaded file name
Duplicate flag

Restricted records

Named designations only

ADA coordinator

Nina Patel

Allowed, minimized

Approval: Owner approval recorded
Visible to: Named designation only
Role template blocked: Yes
Instructor view: Approved accommodation letter only

Title IX coordinator

Unassigned

Blocked

Approval: Gap called out
Visible to: No broad role access
Role template blocked: Yes
Instructor view: No Title IX record fields

Counselor

Unassigned

Blocked

Approval: Gap called out
Visible to: No broad role access
Role template blocked: Yes
Instructor view: No counseling record fields

FERPA records officer

Avery Registrar

Allowed, minimized

Approval: Second administrator approval recorded
Visible to: Named designation plus audit log
Role template blocked: Yes
Instructor view: No inspection workflow access

Audit evidence

Access audit events

Started View-as-role preview

Sam Director - Today, 10:14 AM

Allowed, minimized

Target: Maya Rivera as Front desk
Evidence: Step-up complete; no account switch

Opened record under task grant

Casey Admin Assistant - Today, 10:18 AM

Task grant

Target: Daniel Cho diploma packet
Evidence: Task id diploma-mailing logged

Denied out-of-scope API request

Jordan Lee - Today, 10:21 AM

Blocked

Target: Omar Nguyen Student 360
Evidence: No course enrollment scope

Denied student record deep link

Sam Director - Today, 10:25 AM

Settings only

Target: Maya Rivera Student 360
Evidence: Administrator without student-record role

Viewed setup health during support grant

Otto Support - Today, 10:27 AM

Support grant

Target: BPPE Career School settings
Evidence: Grant expires Oct 13, 2026 at 5:00 PM

Prepared automatic grant expiry

System - Today, 10:30 AM

Task grant

Target: Lead cleanup temporary grant
Evidence: Expires today at 4:00 PM and logs every open

Proof boundary

Access production actions are disabled

This route demonstrates the access-control shape only. It does not impersonate users, grant real access, export records, or write audit events.

10 disabled