Product scope
What it does
Staff logins are provisioned, never self-signed-up: the admin creates a user and gets a handover bundle — school code, sign-in link, and a unique random temporary password with a forced change on first sign-in. Permissions resolve fresh on every request, mandatory 2FA guards every login, and the first successful sign-in flips an invite to active.
The school problem
School teams need a dependable way to handle User Management: Create and manage users. The required records, assigned roles and review boundary must remain explicit.
