# BV-SIS Permission Matrix
## Detailed RBAC Matrix — Every Module, Every Permission

**Document Version:** 1.0  
**Permission Types:** View (V), Create (C), Edit (E), Delete (D), Approve (A), Reject (R), Print (P), Export (X), Configure (G)

**Legend:** ✓ = Granted, — = Denied, SC = Scoped (own faculty/courses/data only)

---

## 1. Institution Setup Permissions

| Feature | Super Admin | Sys Admin | Registrar | Admissions | Finance | Dean | Exams | Lecturer | Comms | Student |
|---------|:-----------:|:---------:|:---------:|:----------:|:-------:|:----:|:-----:|:--------:|:-----:|:-------:|
| **Institution — V** | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — |
| **Institution — E/G** | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| **Campuses — V** | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — |
| **Campuses — C/E/D** | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| **Faculty — V** | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — |
| **Faculty — C/E/D** | ✓ | ✓ | ✓ | — | — | SC | — | — | — | — |
| **Area of Study — V** | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — |
| **Area of Study — C/E/D** | ✓ | ✓ | ✓ | — | — | SC | — | — | — | — |
| **Programme of Study — V** | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — |
| **Programme of Study — C/E/D** | ✓ | ✓ | ✓ | — | — | SC | — | — | — | — |
| **Programme Track — V** | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — |
| **Programme Track — C/E/D** | ✓ | ✓ | ✓ | — | — | SC | — | — | — | — |
| **Programme Structure — V** | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — |
| **Programme Structure — C/E/D** | ✓ | ✓ | ✓ | — | — | SC | — | — | — | — |
| **Programme Structure — P/X** | ✓ | ✓ | ✓ | ✓ | — | ✓ | — | — | — | — |
| **Academic Path — V** | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — |
| **Academic Path — C/E/D** | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| **Sessions Setup — V** | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — |
| **Sessions Setup — C/E/D** | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| **Study Plan Periods — V** | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — |
| **Study Plan Periods — C/E/D** | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| **Academic Intake — V** | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — |
| **Academic Intake — C/E/D** | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| **Institution Dashboard — V** | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — |

---

## 2. Course Management Permissions

| Feature | Super Admin | Sys Admin | Registrar | Admissions | Finance | Dean | Exams | Lecturer | Comms | Student |
|---------|:-----------:|:---------:|:---------:|:----------:|:-------:|:----:|:-----:|:--------:|:-----:|:-------:|
| **Courses — V** | ✓ | ✓ | ✓ | ✓ | ✓ | SC | ✓ | SC | — | — |
| **Courses — C/E/D** | ✓ | ✓ | — | — | — | SC | — | — | — | — |
| **Courses — X** | ✓ | ✓ | ✓ | — | — | ✓ | ✓ | — | — | — |
| **Course Pre-requisite — V** | ✓ | ✓ | ✓ | — | — | SC | ✓ | SC | — | — |
| **Course Pre-requisite — C/E/D** | ✓ | ✓ | — | — | — | SC | — | — | — | — |
| **Course Managers — V** | ✓ | ✓ | ✓ | — | — | SC | ✓ | SC | — | — |
| **Course Managers — C/E/D** | ✓ | ✓ | — | — | — | SC | — | — | — | — |

---

## 3. Student Admission Permissions

| Feature | Super Admin | Sys Admin | Registrar | Admissions | Finance | Dean | Exams | Lecturer | Comms | Student |
|---------|:-----------:|:---------:|:---------:|:----------:|:-------:|:----:|:-----:|:--------:|:-----:|:-------:|
| **Admission Settings — V** | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — |
| **Admission Settings — G** | ✓ | ✓ | — | ✓ | — | — | — | — | — | — |
| **Entry Requirements — V** | ✓ | ✓ | ✓ | ✓ | — | ✓ | — | — | — | — |
| **Entry Requirements — C/E/D** | ✓ | ✓ | — | ✓ | — | — | — | — | — | — |
| **Template Letter — V** | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — |
| **Template Letter — C/E/G** | ✓ | ✓ | — | ✓ | — | — | — | — | — | — |
| **Template Letter — P** | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — |
| **Application Data Entry — V** | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — |
| **Application Data Entry — C/E** | ✓ | ✓ | — | ✓ | — | — | — | — | — | — |
| **Application Data Entry — A/R** | ✓ | ✓ | — | ✓ | — | — | — | — | — | — |
| **Registration Fees — V** | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — |
| **Registration Fees — C/E/D** | ✓ | ✓ | — | ✓ | ✓ | — | — | — | — | — |
| **Admission Form Templates — G** | ✓ | ✓ | — | ✓ | — | — | — | — | — | — |

---

## 4. Student Finance Permissions

| Feature | Super Admin | Sys Admin | Registrar | Admissions | Finance | Dean | Exams | Lecturer | Comms | Student |
|---------|:-----------:|:---------:|:---------:|:----------:|:-------:|:----:|:-----:|:--------:|:-----:|:-------:|
| **Fee Setup — V** | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — |
| **Fee Setup — C/E/D/G** | ✓ | ✓ | — | — | ✓ | — | — | — | — | — |
| **Course Fees — V** | ✓ | ✓ | ✓ | — | ✓ | ✓ | — | — | — | — |
| **Course Fees — C/E/D** | ✓ | ✓ | — | — | ✓ | — | — | — | — | — |
| **Invoice — V** | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | SC |
| **Invoice — C/E** | ✓ | ✓ | — | — | ✓ | — | — | — | — | — |
| **Invoice — P/X** | ✓ | ✓ | ✓ | — | ✓ | — | — | — | — | SC |
| **Minimum Payments — V** | ✓ | ✓ | — | — | ✓ | — | — | — | — | — |
| **Minimum Payments — C/E/D/G** | ✓ | ✓ | — | — | ✓ | — | — | — | — | — |
| **Receipts — V** | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | SC |
| **Receipts — C** | ✓ | ✓ | — | — | ✓ | — | — | — | — | — |
| **Receipts — P** | ✓ | ✓ | ✓ | — | ✓ | — | — | — | — | SC |
| **Student Clearance — V** | ✓ | ✓ | ✓ | — | ✓ | — | ✓ | — | — | SC |
| **Student Clearance — E/G** | ✓ | ✓ | — | — | ✓ | — | — | — | — | — |
| **Release Student Results — V** | ✓ | ✓ | ✓ | — | ✓ | — | ✓ | — | — | — |
| **Release Student Results — A** | ✓ | ✓ | — | — | ✓ | — | ✓ | — | — | — |
| **Release Session Results — V** | ✓ | ✓ | ✓ | — | ✓ | — | ✓ | — | — | — |
| **Release Session Results — A** | ✓ | ✓ | — | — | ✓ | — | ✓ | — | — | — |
| **Finance Dashboard — V** | ✓ | ✓ | ✓ | — | ✓ | — | — | — | — | — |

---

## 5. Student Registration Permissions

| Feature | Super Admin | Sys Admin | Registrar | Admissions | Finance | Dean | Exams | Lecturer | Comms | Student |
|---------|:-----------:|:---------:|:---------:|:----------:|:-------:|:----:|:-----:|:--------:|:-----:|:-------:|
| **Computer Number — V** | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — |
| **Computer Number — G** | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| **Update Student Id — V** | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| **Update Student Id — E** | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| **Student Registration — V** | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | SC | — | SC |
| **Student Registration — C/E** | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — |
| **Student Registration — D** | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| **Student Registration — P/X** | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | SC | — | SC |
| **Online Reg Requests — V** | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | SC |
| **Online Reg Requests — A/R** | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — |
| **Switch Program — V** | ✓ | ✓ | ✓ | — | — | ✓ | — | — | — | — |
| **Switch Program — E** | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| **Student Status — V** | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | SC |
| **Student Offence — V** | ✓ | ✓ | ✓ | — | — | ✓ | — | — | — | — |
| **Student Offence — C/E** | ✓ | ✓ | ✓ | — | — | ✓ | — | — | — | — |
| **Student Courses — V** | ✓ | ✓ | ✓ | — | — | ✓ | ✓ | SC | — | SC |
| **Student Courses — E** | ✓ | ✓ | ✓ | — | — | — | — | SC | — | — |
| **Intake vs Program Stats — V/X** | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — |
| **Semester vs Intake Stats — V/X** | ✓ | ✓ | ✓ | — | — | ✓ | ✓ | — | — | — |
| **Semester Reg Status — V/X** | ✓ | ✓ | ✓ | — | — | ✓ | ✓ | — | — | — |
| **Custom Reports — V/C/X** | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — |
| **Class List — V/P/X** | ✓ | ✓ | ✓ | — | — | ✓ | ✓ | SC | — | — |

---

## 6. BulkSMS and Email Permissions

| Feature | Super Admin | Sys Admin | Registrar | Admissions | Finance | Dean | Exams | Lecturer | Comms | Student |
|---------|:-----------:|:---------:|:---------:|:----------:|:-------:|:----:|:-----:|:--------:|:-----:|:-------:|
| **Send SMS — V** | ✓ | ✓ | ✓ | ✓ | — | — | — | — | ✓ | — |
| **Send SMS — C (send)** | ✓ | ✓ | — | ✓ | — | — | — | — | ✓ | — |
| **Send Email — C** | ✓ | ✓ | — | ✓ | — | — | — | — | ✓ | — |
| **Contact Groups — C/E/D** | ✓ | ✓ | — | ✓ | — | — | — | — | ✓ | — |
| **Message Templates — C/E/G** | ✓ | ✓ | — | — | — | — | — | — | ✓ | — |
| **Send History — V** | ✓ | ✓ | ✓ | ✓ | — | — | — | — | ✓ | — |
| **Gateway Settings — G** | ✓ | ✓ | — | — | — | — | — | — | ✓ | — |

---

## 7. Student Identity Cards Permissions

| Feature | Super Admin | Sys Admin | Registrar | Admissions | Finance | Dean | Exams | Lecturer | Comms | Student |
|---------|:-----------:|:---------:|:---------:|:----------:|:-------:|:----:|:-----:|:--------:|:-----:|:-------:|
| **ID Card Capture — V** | ✓ | ✓ | ✓ | — | — | — | — | — | — | SC |
| **ID Card Capture — C/E** | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| **Card Templates — G** | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| **Print Queue — P** | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| **Reprint/Replacement — C** | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |

---

## 8. Examination Permissions

| Feature | Super Admin | Sys Admin | Registrar | Admissions | Finance | Dean | Exams | Lecturer | Comms | Student |
|---------|:-----------:|:---------:|:---------:|:----------:|:-------:|:----:|:-----:|:--------:|:-----:|:-------:|
| **Exam Schedule — V** | ✓ | ✓ | ✓ | — | — | ✓ | ✓ | SC | — | SC |
| **Exam Schedule — C/E/D** | ✓ | ✓ | — | — | — | — | ✓ | — | — | — |
| **Grading Schemes — G** | ✓ | ✓ | — | — | — | — | ✓ | — | — | — |
| **Mark Entry — V** | ✓ | ✓ | ✓ | — | — | ✓ | ✓ | SC | — | SC |
| **Mark Entry — C/E** | ✓ | ✓ | — | — | — | — | ✓ | SC | — | — |
| **Mark Moderation — A** | ✓ | ✓ | — | — | — | ✓ | ✓ | — | — | — |
| **Result Processing — A** | ✓ | ✓ | — | — | — | — | ✓ | — | — | — |
| **Result Slips — P** | ✓ | ✓ | ✓ | — | — | ✓ | ✓ | SC | — | SC |

---

## 9. System Maintenance Permissions

| Feature | Super Admin | Sys Admin | All Others |
|---------|:-----------:|:---------:|:----------:|
| **Users — V/C/E/D** | ✓ | ✓ | — |
| **Roles & Permissions — G** | ✓ | ✓ | — |
| **System Settings — G** | ✓ | ✓ | — |
| **Audit Logs — V** | ✓ | ✓ | — |
| **Backup & Restore — G** | ✓ | ✓ | — |
| **Email/SMS Config — G** | ✓ | ✓ | — |

---

## 10. Permission Naming Convention (For Implementation)

```
{module}.{feature}.{action}

Examples:
institution.setup.view
institution.campuses.create
course.courses.edit
student.registration.approve
finance.invoice.export
examination.marking.enter
sms.send.create
system.users.configure
```

---

## 11. Special Permission Rules

| Rule | Description |
|------|-------------|
| SP-01 | Approve/Reject on Online Registration Requests requires `student.online_registration.approve` |
| SP-02 | Release Results requires BOTH `finance.results.release` AND finance clearance verified |
| SP-03 | Update Student Id requires `student.id.update` + mandatory reason field |
| SP-04 | Bulk SMS send requires `sms.send.create` + daily rate limit per role |
| SP-05 | Delete operations on master data require confirmation + audit; soft delete only |
| SP-06 | Export of student PII requires `student.registration.export` + logged in audit |
| SP-07 | Lecturer mark entry scoped to course_managers assignments for current session |
| SP-08 | Student portal users restricted to `own.*` permissions via policy gates |

---

*End of Permission Matrix*