Administrator Dashboard

Operational view

Role-specific access is enforced by membership, capability and RLS rules in the reconstructed data model; navigation visibility alone is not authorization.

Controls

School isolation: school-owned data carries a school boundary.

Audit: sensitive workflow transitions preserve actor, time and reason.

Documents: official outputs preserve branding/reference snapshots.

Payroll: C2 operations and C3 reporting are integrated; confidential access remains capability-controlled.