Roles & Permissions
Apostolic Path uses a role-based access control system to ensure that team members see only what they need to see.
Role Hierarchy
| Role | Access Level |
|---|---|
| Admin | Full church management — settings, users, billing, all data |
| Leader | Church-wide student data, studies, classes, reports, first steps |
| Teacher | Assigned students, their own studies and classes |
| Student | Personal progress, assigned studies and classes only |
What Each Role Can Do
Admin
- Everything a Leader can do, plus:
- Manage church settings (name, logo, location)
- Configure First Steps program
- Manage users and assign roles
- Manage billing and subscription
- Designate the pastoral team
- Configure API keys and webhooks (on applicable plans)
- Manage multi-church network settings
Leader
- View and manage all students
- Create and manage Bible studies and classes
- View all reports and analytics
- Access First Steps tracking
- View the attention list and unassigned students
- Add flags and notes to students
Teacher
- View students assigned to them
- Lead Bible studies assigned to them
- Teach class instances assigned to them
- Take attendance in their classes
- Add notes to their assigned students
- View their own dashboard analytics
Student
- View their own New Birth progress
- View their own First Steps status
- Access their assigned studies and lesson materials
- View their class enrollments and attendance
- Update their profile information
Assigning Roles
Admins can assign roles under Settings > Roles:
- Navigate to Settings > Roles
- Click on a user
- Select the new role
- Click Save
caution
Changing a user's role immediately updates their access. For example, downgrading a Leader to Teacher will restrict their view to only their assigned students.
Pastoral Access
In addition to the standard roles, there's a special pastoral access layer that controls visibility of sensitive data. See Pastoral Team for details.