> ## Documentation Index > Fetch the complete documentation index at: https://faq.exode.biz/llms.txt > Use this file to discover all available pages before exploring further. # Access rights > The full list of school staff permissions: what each permission opens, how to grant and revoke permissions and what a staff member sees without the required permission Permissions determine which sections of the control panel a staff member sees and what they can do in them. Permissions are granted to each team member separately in **My school → Team** (in a corporate school — **Company → Administrators**). Who team members, editors and curators are is explained on the [Roles in the school](https://faq.exode.biz/en/general/roles-permissions/user-roles.md) page. ## How permissions work * Permissions add up. If a section is opened by several permissions, any one of them is enough. * Sections the staff member has no permissions for are hidden from the menu. * Permissions are also checked on the server. Even with a direct link, a staff member without the permission can neither view the data nor save changes. * Permission changes take effect immediately. For the staff member's menu to update, they need to reload the page. * Course permissions apply to all courses of the school, except courses whose visibility is limited to a list of editors. See [Roles in the school](https://faq.exode.biz/en/general/roles-permissions/user-roles.md) for details. ## List of permissions Permissions are grouped the same way as in the team member form. > [!NOTE] > > In a corporate school, some permissions have different names, “School sales” and “School refunds” are not shown, and there > are “Staff management” and “Staff browsing” permissions for the organization structure. The company permission list is on the > [Roles and permissions in a company](https://faq.exode.biz/en/corporate/roles.md) page. ### School management | Permission | What it allows | | - | - | | **School settings management** (in a corporate school — **Company settings management**) | The **Home** section. In **My school** / **Company**: **Settings** (information and domain, design, catalog and footer, left menu), **Payment acceptance** (commercial schools only), **Login and registration**, **Subscription and tariff** (commercial schools only). In **For developers**: **Webhooks** and **Custom code** | | **School user management** (in a corporate school — **Company user management**) | The **People → All users** section: creating, editing, blocking and deleting users, passwords and logins, the user card, granting and freezing course access. Adding and removing students in groups | | **Apps & pages management** | The **My school** / **Company** → **Apps & pages** section: creating and editing the school's pages | ### Form management | Permission | What it allows | | - | - | | **Forms management** | Creating and editing the school's forms and viewing responses | ### Integrations management | Permission | What it allows | | - | - | | **Integrations management** | The **My school** / **Company** → **Integrations** section: connecting, configuring, turning off and deleting the school's integrations, viewing their run history | ### Knowledge base management This group of permissions appears only if the knowledge base is enabled in the school. | Permission | What it allows | | - | - | | **Knowledge base management** | Creating and deleting knowledge base spaces, folders and files, managing access to spaces | | **Knowledge base browsing** | Reading all knowledge base spaces, even if access to a space was not granted personally | ### Organization management | Permission | What it allows | | - | - | | **School organization management** (in a corporate school — **Company management**) | **My school → Legal data** (details and documents; commercial schools only) and **Content and media** (stories). The list of course editors and the choice of group curators. The buttons for deactivating and deleting members in **Team** / **Administrators** (together with the “School team management” / “Company employees management” permission) | | **School sales** (commercial schools only) | The **Sales** section: **Payments**, **Installments**, **Subscriptions**. The **Payments** tab in the user card. Notifications about new payments and completed refunds | | **School refunds** (commercial schools only) | Working with refunds. A refund for a payment is currently processed by Exode support | | **School team management** (in a corporate school — **Company employees management**) | The **My school → Team** / **Company → Administrators** section: adding members and changing their permissions. The list of course editors and the choice of group curators | ### Course management | Permission | What it allows | | - | - | | **Course management** | Creating and editing courses: content, lessons, practice, settings, gamification, certificates. Viewing, creating and configuring course groups. Viewing all course lessons without buying. The **Practice** section (check center) in view-only mode: the list of work, statuses and scores — without grading work or the practice chat | | **Course browsing** | Seeing the course list and opening their lessons for viewing without buying. This permission does not allow editing courses | | **Course curator** | The **Practice** section (check center): checking and grading students' work, the practice chat and answering questions. Viewing course groups and their students. A staff member with this permission can be assigned as a group curator | | **Course reports view** | Lesson completion statistics and students' lesson ratings — in the **Exode AI** assistant (“School assistant”), which is available only in the desktop version. There is no separate reports screen | | **Course comment management** | The **Reviews** section in the course settings: moderating course reviews — changing the status (publish or reject) and the **Response to review**. This permission does not change the student's text or rating. Works together with the “Course browsing” permission | | **Course student management** | **People → All students** and the course's **Students** section. The **Open access** button for materials closed by a deadline. This permission does not open the **Practice** section | ### Product management | Permission | What it allows | | - | - | | **Product management** | Launches and tariffs, including the choice of the group a student joins after payment. Promo codes, course questions and answers, review moderation, catalog publication. Tariffs and promo codes are for commercial schools only | ### Task and practice management | Permission | What it allows | | - | - | | **Browse task database** | The **Task database** section: the task list, filters and the tasks themselves — without editing rights | | **Task database management** | Creating, editing and deleting tasks and tags in the task database | > [!NOTE] > > The **My school → For developers → API keys** section (in a corporate school — **Company → For developers → API keys**) is available only to the school owner. There is no separate permission > for it. ## Permissions for common tasks Some actions require a combination of permissions: | Task | Which permissions are needed | | - | - | | Grant a student access to a course from their card | “School user management” / “Company user management” and “Course management” or “Course curator” — to choose a group | | Add or remove a student in a group | “School user management” / “Company user management” | | Open course group pages | “Course management” or “Course curator” | | Create a group, change its settings or delete it | “Course management”. A curator also needs “Product management” or “School user management” / “Company user management” for this | | Choose group curators and course editors | “School organization management” / “Company management” or “School team management” / “Company employees management” | | Deactivate or delete a team member | “School team management” / “Company employees management” and “School organization management” / “Company management” | ## How to grant permissions **1. Open the team** Go to **My school → Team** / **Company → Administrators** and click **Add to team**. The section is available with the “School team management” / “Company employees management” permission. **2. Choose a user** Find the person in the **User search** field. You can add only someone who already has an account in the school. If the person is already on the team, the message “The user is already on the team” and the link **Go to member settings** appear. **3. Check the permissions** Check the permissions you need. You must choose at least one. **4. Save** Click **Add to team**. If the “Staff members” limit of the tariff is used up, you won't be able to add the person — the platform will offer to change the tariff (in a corporate school — the **Request a tariff upgrade** button). ## How to change or revoke permissions Click a member in the **Team** / **Administrators** list — **Team member settings** open. * **Change permissions.** Check or uncheck the boxes. Changes are saved automatically. The **Select all** and **Unselect all** buttons work for a whole group of permissions. * **Disable temporarily.** Click the **Active** button — the status changes to “Not active”. To restore access, click **Activate**. If the “Staff members” limit of the tariff is used up, you can't activate the staff member — a window for changing the tariff opens. * **Remove from the team.** Click **Remove from team** and confirm. Restrictions: * You can't change your own permissions or status or remove yourself. The exception is the owner: they can change their own permissions. * You can't change the school owner's permissions, deactivate or remove them. * The owner can't remove permissions from themselves, except “School sales”, “School refunds” (both commercial schools only) and “Course curator”. * Members who can't be edited are marked in the list with a lock icon and the tooltip “No editing rights”. After deactivation or removal, the staff member immediately loses access to the control panel. Their account, courses and progress are kept — they remain a user of the school. > [!TIP] > > A deactivated staff member stops getting new students as a curator but stays among group curators: after > activation, they start getting students again. If they should no longer curate a group, remove them from the > **Group curators** block in the group settings. ## What a staff member sees without the required permission * **In the menu**, the section is not shown. * **Through a direct link**, the “Access denied” screen opens with the heading “Insufficient permissions”, the hint “Request permissions: …” with the names of the required permissions and the **Refresh page** button. * **Inside a page**, an “Insufficient permissions” banner is shown instead of the unavailable block, with a hint about which permissions to request. If permissions were just granted, the staff member only needs to click **Refresh page**. ## Frequently asked questions > **I granted a staff member a permission, but they still see “Access denied”. What should I do?** > > Ask the staff member to click **Refresh page** or reload the tab. On the server, the permission takes effect > immediately, and the menu updates after a reload. > **Can a staff member grant themselves more permissions?** > > No. Only the school owner can change their own permissions. But keep in mind: a staff member with the “School > team management” / “Company employees management” permission can grant other members any permissions, including ones they don't have themselves. > **Why can't a staff member choose a group when granting a student access?** > > The group list is available only with the “Course management” or “Course curator” permission. Grant the staff member one of > them in addition to “School user management” / “Company user management”. > **Which permissions does a curator need?** > > At a minimum — “Course curator”. The staff member must also be added to the group's curators. If the curator needs to > see the list of all students and open materials closed by a deadline, add “Course student > management”. > **Who receives notifications about new payments?** > > Commercial schools only: all active team members with the “School sales” permission. If a staff member shouldn't receive them, remove > this permission from them. > **Why are there no “Finances” and “School appearance management” permissions in the list?** > > These permissions are not granted to school staff through the **Team** / **Administrators** section. The website design settings > are opened by the “School settings management” / “Company settings management” permission. > **How is deactivation different from removing someone from the team?** > > A deactivated member stays in the list with the “Not active” status and keeps their set of permissions — you can > bring them back with one button. A removed member disappears from the list. To bring them back, add the person to the team again > and check the permissions again. Neither a deactivated nor a removed member takes up a place in the “Staff members” limit. > **A staff member doesn't see all courses even though they have “Course management”. Why?** > > These courses have limited visibility for the team. Add the staff member to the **Editors** list in > **Courses → course → Settings → Authors and editors** or turn on **Available to all editors according to their roles**. > **Can I delete a user who is on the team?** > > No. As long as the user has a team record, even an inactive one, you can't delete them in **People** — > the error “Cannot delete a school manager” appears. First remove them from the team. *** *Updated: 2026-10-17 07:07 UTC* This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.