Access Controls

School and class membership#

School access requires an active membership. Teachers review only assigned classes. Students need an allowed class context for school conversations. Personal access is a separate workspace.

Models and tools#

The school configures the model catalog. Class policies can narrow the choices. Connected sources, skills, and actions require their own permissions. A visible link or resource identifier does not grant access.

Test both sides of a rule#

For a sensitive workflow, test a permitted account and an account outside the class. Check the denial as well as the successful request. Include a revoked membership or share when testing access changes.