Skip to main content

Roles & Permissions

Micron ERP uses a role-based access control system. Every user is assigned a role that determines which modules they can access and what actions they can perform.

Built-In Roles

Micron comes with the following pre-defined roles:

School Admin

The highest level of access within a school account. School Admins can:
  • Access and manage all modules (Students, Teachers, Fees, HR, Library, Inventory, etc.)
  • Configure school settings, notification preferences, and Razorpay integration
  • Manage staff accounts and invite new users
  • View all financial reports and payroll data
  • Publish circulars to any audience
A school can have multiple School Admins. The first admin is created during onboarding. Additional admins can be invited from Settings → Staff Accounts.

Teacher

Teachers log into the Teacher Portal and have access to:
  • Attendance — mark attendance for their assigned classes only
  • Homework — assign and manage homework for their classes
  • Timetable — view their own schedule
  • Exams — enter marks for subjects they teach
  • Student Profiles — view (not edit) profiles of students in their assigned classes
  • Leave — apply for and view their own leave
  • Circulars — view circulars directed to teachers
Teachers cannot access fee information, HR/payroll of other staff, or school settings.

Accountant

Accountants have access to the Finance module only:
  • Generate and manage fee invoices
  • Record payments and issue receipts
  • View and export all financial reports (collection summary, outstanding dues, day book)
  • Apply fee discounts (subject to approval workflow)
Accountants cannot access HR/payroll, student academic records, or school settings.

Librarian

Librarians have access to the Library module only:
  • Add and manage books in the catalog
  • Issue and return books
  • View and manage overdue records
  • Generate library reports

HR Manager

HR Managers have access to the HR & Payroll module only:
  • Manage staff records and salary structures
  • Process monthly payroll
  • Approve or reject leave requests
  • Generate payroll reports and payslips

Receptionist

Receptionists have limited read/write access to:
  • View student and parent profiles
  • Update parent contact information
  • Publish circulars
  • Manage fee enquiries (view only, no payment recording)

Transport Manager

Transport Managers have access to the Transport module only:
  • Manage vehicles and routes
  • Assign and update student transport details
  • View route manifests

Role Comparison Table

FeatureSchool AdminTeacherAccountantLibrarianHR Manager
Student Profiles (view)YesOwn classesNoNoNo
Student Profiles (edit)YesNoNoNoNo
Fee InvoicesYesNoYesNoNo
PayrollYesNoNoNoYes
LibraryYesNoNoYesNo
TransportYesNoNoNoNo
Circulars (publish)YesNoNoNoNo
SettingsYesNoNoNoNo
HR RecordsYesOwn onlyNoNoYes

Custom Roles

If the built-in roles do not match your school’s structure, you can create custom roles with specific permissions:
  1. Go to Settings → Roles & Permissions
  2. Click Create Custom Role
  3. Enter a Role Name (e.g., “Vice Principal”, “Department Head”)
  4. Select the base role to inherit permissions from (e.g., based on Teacher)
  5. Use the permissions checkboxes to add or remove specific permissions:
    • Module-level access (read, create, edit, delete)
    • Action-level permissions (e.g., can approve discounts, can publish circulars)
  6. Click Save Role
Once created, this custom role appears in the role dropdown when inviting staff from Settings → Staff Accounts.

Example: Vice Principal

A Vice Principal might need access similar to a School Admin but should not be able to manage billing or change school settings. Create a custom role:
  • Base: School Admin
  • Remove: Billing access, Settings access
  • Result: Can manage students, teachers, fees, and HR — but cannot change system settings or subscription

Frequently Asked Questions

Can I change a user’s role after they have been invited? Yes. Go to Settings → Staff Accounts, find the user, and click Edit. Change their role and save. The change takes effect immediately — they will see the new permissions on their next page load or login. What if I need a role that only sees one specific class? Currently, class-level access restriction is only available for Teachers (who see only their assigned classes). For other roles (e.g., a Section Coordinator), create a custom role. Fine-grained per-class access for non-teacher roles is on the product roadmap. Can a user have more than one role? No. Each user has exactly one role. If someone needs capabilities from two roles, create a custom role that combines both. Are permission changes audited? Yes. Any change to roles or permissions is logged with the admin’s name and timestamp. Contact support to access the full audit log if needed.