ADMIN PANEL

• They ask. A colleague signs in, opens this page, and clicks “Request access”. Their request appears below.
• You grant it by email — works whether or not they've ever signed in. If they have no account yet, the role waits for them and applies automatically on their first sign-in.
• Students need no setup at all. Anyone who signs in is a student. Add them to classes by CSV or single email on the Classes tab.

• Teacher — “Can see” is per person: their own classes (default) or the whole building. Their building admin decides.
• Building Admin — whole building; can grant teacher roles inside it.
• Super Admin — everything, including books, lessons and schools.

The first super admin. Nobody — including a super admin — can edit their own staff record, which is what stops an admin quietly widening their own access. So the very first one has to be created by hand.

Create a document in the staff collection whose ID is that person's Auth UID (Authentication → Users → “User UID”), with fields: role = super_admin (string), schoolIds = array of school IDs, readScope = building (string), active = true (boolean), plus email and displayName.

Open the Firebase console →  ·  Everything else, including adding schools, is on this page.