Skip to content
Go to k12panel.com
  • There are no suggestions because the search field is empty.

System Users

Control who can access your K12Panel organization and what each user can do, using OAuth logins and role-based permissions.

System Users

K12Panel uses OAuth2 for authentication, so every system user must sign in with a Google or Microsoft login. That can be a basic personal address (such as an @gmail or @outlook account) or a Google Workspace / Microsoft 365 managed account.

On the System Users tab you can add users, remove users, and change the role of existing users.

SuperAdmin

One user is the organization’s designated SuperAdmin. The SuperAdmin role cannot be changed by other users — even other Admins — and the SuperAdmin cannot be deleted. The SuperAdmin has no special powers over a normal Admin in day-to-day work, except that they alone designate who is a Budgeter and they can’t be removed or altered by others.

Budgeter

Budgeter is a special designation that can be added to any user regardless of role. A Budgeter can use the Budgeting module. Only the SuperAdmin can designate who is a Budgeter.

Roles

Roles are cumulative — each higher role includes the abilities of the ones below it. Reporter is the most restricted; Admin has full control.

Note: adding and removing K12Panel system users is an Admin-level capability. Lower roles cannot manage who can sign in to the organization.

Common Questions

What logins are allowed?
Google or Microsoft OAuth accounts — personal or managed.

Who can add or remove users?
Admins. Managing system users is an Admin-level capability.

What makes the SuperAdmin special?
It can’t be deleted or changed by others, and only it can designate Budgeters.

What is a Budgeter?
A flag (set only by the SuperAdmin) that lets any user, of any role, use the Budgeting module.

Are roles cumulative?
Yes — each higher role includes everything the roles below it can do.