Roles and data access

This article explains how SpeechGradebook roles control what data each user can see. It applies to admins and IT reviewers.

Role summary

Role	Data scope
Instructor	Own courses, students, rubrics, and evaluations
Admin	All data within their department or institution; cross-course analytics with instructor filters
Super Admin	Institution management and platform configuration; cross-institution access where configured

Access is enforced with Supabase row-level security (RLS). Each query is filtered by the signed-in user's role and institution.

Audit logs record access to student evaluation data, including purpose, user, IP address, and user agent.

See Role permissions for a detailed matrix.

Related: Trust overview