Role & Permission System – Institution Kit

Pre-defined Roles

Role	Display Name	Core Permissions
`campus_admin`	Branch Head	Full campus management (limited to assigned campus)
`accountant`	Accountant	Fees, invoices, financial reports
`teacher`	Teacher	Attendance, gradebook, homework
`operator`	Operator	Gradebook management
`student`	Student	Read-only (future portal access)
`parent`	Parent	View child's grades, attendance, book meetings
`receptionist`	Receptionist	Student inquiries, basic data entry
`finance_manager`	Finance Manager	Full financial control (created dynamically)

Granular Capabilities

Finance Capabilities:

ik_manage_expenses       → Create/edit expenses
ik_approve_expenses      → Approve/reject expenses
ik_view_expense_reports  → View financial dashboards
ik_manage_budgets        → Set budget limits
ik_view_profit_loss      → Access P&L statements
ik_export_financial_data → Download CSV/PDF reports

Student Management:

ik_manage_students       → Full CRUD operations
ik_manage_admissions     → Process new enrollments
ik_view_students         → Read-only student list

Exam Management:

ik_manage_exam_types     → Create exam categories
ik_enter_exam_results    → Input marks
ik_publish_exam_results  → Make results visible to parents
ik_generate_report_cards → Create PDF report cards

How to Add Custom Roles

php

// Add a custom role
add_role('academic_coordinator', 'Academic Coordinator', [
    'read' => true,
    'ik_view_students' => true,
    'ik_manage_exam_schedules' => true,
    'ik_view_exam_analytics' => true
]);

// Assign to user
$user = get_user_by('login', 'jane.coordinator');
$user->add_role('academic_coordinator');