Concepts

Staff, users, roles, permissions, and scopes.

Console

Your institution’s web surface: <slug>.senthez.com. Auth, navigation, and branding follow that host. All of your work happens there.

Employee ≠ User

Employee: org person record
User: login account (username / email / password)
They can be linked; not every employee needs a user

Role, Permission, Scope

Role: bundled permissions (Owner, Advisor, Instructor…)
Permission: a single capability
Scope: how wide the data window is — OWN < ASSIGNED < UNIT < BRANCH < ORGANIZATION

Seeing a menu item is not the same as being authorized. The API enforces security; scope policy cuts rows.