# 🛡️ Manage Roles

## Role-Based Access Control (Deep Dive)

Security is paramount. The Role Management section allows you to define custom permissions for different types of staff, utilizing the Spatie Roles & Permissions architecture.

### Core Functionalities:

- Role Creation: Beyond 'admin' and 'examiner', you can create hyper-specific roles (e.g., 'Data Entry Clerk', 'Invigilator').
- Granular Permissions: Each role is built by ticking boxes for specific capabilities (e.g., `view_exams`, `create_exams`, `delete_users`, `export_results`). This enforces the "Principle of Least Privilege."
- Dynamic Assignment: If a role's permissions are updated here, all users assigned to that role instantly gain or lose those capabilities system-wide without needing to log out.
- Immutable Admin: The Super Administrator role is hardcoded and protected against accidental deletion to prevent system lockouts.