🛡️ Manage Roles

Role-Based Access Control (Deep Dive)

Security is paramount. The Role Management section allows you to define custom permissions for different types of staff, utilizing the Spatie Roles & Permissions architecture.

Manage Roles

Core Functionalities:

  • Role Creation: Beyond 'admin' and 'examiner', you can create hyper-specific roles (e.g., 'Data Entry Clerk', 'Invigilator').
  • Granular Permissions: Each role is built by ticking boxes for specific capabilities (e.g., `view_exams`, `create_exams`, `delete_users`, `export_results`). This enforces the "Principle of Least Privilege."
  • Dynamic Assignment: If a role's permissions are updated here, all users assigned to that role instantly gain or lose those capabilities system-wide without needing to log out.
  • Immutable Admin: The Super Administrator role is hardcoded and protected against accidental deletion to prevent system lockouts.