Part 7. Reference
7.2 Capability index
Each capability in the catalogue, grouped by the part of Kestrel that owns it, with what it lets a person do and the shipped roles that start with it.
Written forRegistrarFront officeTeacherHead of house or yearWellbeingCounsellorLearning supportChild safety officerCase managerDeputy case managerNursePrincipal and executiveBusiness managerIT
How to read this index
A capability is a named permission. A role is a set of capabilities, and a person's reach is everything their roles have together. Each table below lists one part of Kestrel. The last column names the roles a school starts with that have the capability. A school may change any role on the "Roles" page of Settings, so this is where each school begins, and the page shows where it stands now.
Students
| Capability | What it lets you do | Roles that start with it |
|---|---|---|
| person.affiliation.read | Read whether someone is a student, staff member, applicant or volunteer. | Registrar, Front office, Teacher, Head of house or year, Wellbeing, Counsellor, Learning support, Child safety officer, Nurse, Principal and executive, Business manager, Privacy officer |
| person.affiliation.write | Record someone arriving, changing role or leaving. | Registrar, Principal and executive |
| person.billing.read | Read who pays a student's fees and in what shares, and which concessions and scholarships apply. | Registrar, Principal and executive, Business manager |
| person.billing.write | Record who pays a student's fees and in what shares, and record a concession or scholarship. | Registrar, Principal and executive, Business manager |
| person.merge.write | Merge two records that are one person into one, moving each fact to the record that survives, and reverse a merge inside the school's window. | Registrar |
| person.protection.write | Hide where a person lives and how to contact them from all staff except those named, choose who can still see it, and remove the protection. | Principal and executive |
| person.record.read | Read names, dates of birth and the name history of the students, parents and staff at this school. | Registrar, Front office, Teacher, Head of house or year, Wellbeing, Counsellor, Learning support, Child safety officer, Nurse, Principal and executive, Business manager, Privacy officer |
| person.record.write | Create records for students, parents and staff and correct their names and dates of birth. | Registrar, Front office, Principal and executive |
| person.register.read | Open Students on each student at the school, and the applicants, former students and everyone on file, before anything is searched for. Without it, Students opens on the students you teach and a search finds anyone else. | Registrar, Front office, Head of house or year, Principal and executive, Business manager |
| person.restricted.read | Read parenting orders, exit reasons, a recorded death and the merge history behind an identity decision. | Principal and executive |
| person.standing.read | Read who may collect a student, who is rung in an emergency and in what order, and who receives reports. | Registrar, Front office, Teacher, Head of house or year, Wellbeing, Counsellor, Learning support, Child safety officer, Nurse, Principal and executive, Business manager, Privacy officer |
| person.standing.write | Record who may collect a student, the order they are rung in, who receives reports, and who holds parental responsibility. | Registrar, Front office, Principal and executive |
The school
| Capability | What it lets you do | Roles that start with it |
|---|---|---|
| tenant.audit.read | Read who saw and changed what, and when. | Principal and executive, IT |
| tenant.data.export | Download each table of the school's record as CSV and JSON, with each document filed, in one archive, with a passkey. | Principal and executive |
| tenant.export.read | Read each statutory return this school runs, the history of its runs with their checksums, and each student a run found a fact missing for. | Principal and executive, Business manager |
| tenant.export.run | Check a return such as the census against the record, produce the file to submit with a passkey, and open a file already produced. | Principal and executive, Business manager |
| tenant.import.manage | Upload a file of students, parents and staff, of households or of relationships, write what it contains onto the record, and take a run back out. | Registrar |
| tenant.import.read | Read the files this school has imported from a previous system, with each rejected line and the reason for it. | Registrar |
| tenant.people.manage | Give and remove access to this school, and change what a colleague can see and do. | Business manager |
| tenant.plugin.manage | Install a plugin, grant it capabilities, and enable or disable it. | IT |
| tenant.plugin.read | Read which plugins are installed and what each one has been granted. | IT |
| tenant.privacy.manage | Record a request that has arrived, acknowledge it, and record what was done about it or why it was refused. | Privacy officer |
| tenant.privacy.read | Read the access, correction and deletion requests this school has received, and where each one has got to. | Privacy officer |
| tenant.roster.export | Register a system that collects the class roster, such as Wonde or School Data Sync, revoke one, and download the roster files. | Registrar, Principal and executive |
| tenant.settings.read | Read the school's name, address, language, currency and palette. | Registrar, Front office, Teacher, Head of house or year, Wellbeing, Counsellor, Learning support, Child safety officer, Nurse, Principal and executive, Business manager, IT, Privacy officer |
| tenant.settings.write | Change the school's name, address, language, currency and palette. | Business manager, IT |
Messages
| Capability | What it lets you do | Roles that start with it |
|---|---|---|
| comms.agreement.manage | Record an acceptance given on paper, excuse a person from an agreement, void an acceptance and answer a family's question. | Registrar, Front office |
| comms.agreement.read | Read the school's agreements, each version's words, and who has accepted each one or is still to. | Registrar, Front office, Principal and executive |
| comms.consent.read | Read what a family has agreed to about a child, and when they agreed or withdrew. | Registrar, Front office, Teacher, Head of house or year, Nurse, Principal and executive, Business manager |
| comms.consent.write | Record a consent a family gave on paper, at the counter or by telephone, and its withdrawal. | Registrar, Front office, Business manager |
| comms.interaction.read | Read the telephone calls, counter visits, letters and meetings logged about a student. | Registrar, Front office, Teacher, Head of house or year, Principal and executive |
| comms.interaction.write | Log a telephone call, a counter visit, a letter or a meeting with a family. | Registrar, Front office, Teacher, Head of house or year |
| comms.message.read | Read the messages this school has sent, who each one was for, and whether it reached them. | Registrar, Front office, Principal and executive |
| comms.message.send | Send a message by email, SMS or app notification to the parents of a year level, a class or a student. | Registrar, Front office |
| comms.suppression.read | Read why a message didn't reach a parent or carer: what they're set up to receive, a court order, a recorded death or a protected record. | Principal and executive |
| comms.template.write | Publish a template the office sends from, and publish its next version. | Registrar |
Documents
| Capability | What it lets you do | Roles that start with it |
|---|---|---|
| document.hold.manage | Exempt a document from the disposal schedule for a court, an inquiry or a regulator, and put it back on the schedule. | None of the shipped roles |
| document.record.read | Read which documents a record contains, and open one. | None of the shipped roles |
| document.record.write | Attach a document to a record, and take one out of the working set. | None of the shipped roles |
| document.restricted.read | Read and open the documents filed at the restricted tier. | None of the shipped roles |
Activities
| Capability | What it lets you do | Roles that start with it |
|---|---|---|
| activities.comment.write | Read and write the season comment a report prints for a student, on an activity the writer has an open assignment on, or on any activity for somebody who runs the rosters. | Front office, Teacher, Child safety officer, Principal and executive |
| activities.excursion.read | Read the school's excursions, camps and tours, what has happened to each, who went on one and which children had no consent read for them. | Front office, Head of house or year, Child safety officer, Nurse, Principal and executive |
| activities.excursion.write | Propose a trip, record what was decided about it, ask its families for their consent by a deadline and to confirm their child's medical details, write the list at departure with the consent and the check read for each person, and withdraw somebody from it. | Front office, Child safety officer, Principal and executive |
| activities.roster.read | Read the seasons and activities, who is on each roster and who supervises it, the trainings and fixtures, and the activities a student has been in. | Registrar, Front office, Teacher, Head of house or year, Wellbeing, Child safety officer, Nurse, Principal and executive |
| activities.roster.write | Open seasons and activities, put students on a roster and take them off it, and schedule, amend and cancel trainings and fixtures. | Front office, Child safety officer, Principal and executive |
| activities.selection.read | Read the selection rounds, the choices each child ranked, the places a round proposes to fill and who is waiting for one. | Front office, Child safety officer, Principal and executive |
| activities.selection.write | Open a selection round, amend it while it is open, and confirm the places it fills, which writes a membership for each child placed. | Front office, Child safety officer, Principal and executive |
| activities.staffing.write | Put a coach, manager or supervisor on an activity and take them off it, which reads whether their working with children check is current. | Child safety officer, Principal and executive |
Foundation and alumni
| Capability | What it lets you do | Roles that start with it |
|---|---|---|
| advancement.appeal.send | Send an appeal or an invitation to the donors and former students it is addressed to, and send a class representative's invitation to their year. | Advancement, Development manager |
| advancement.bequest.read | Read the bequests the school has been told of, and the fund each is meant for. | Development manager |
| advancement.bequest.write | Record a bequest a person has told the school of, and its realisation. | Development manager |
| advancement.constituent.read | Read the school's former students, the association and its council, and the reunions, functions and meetings the office runs. | Advancement, Development manager |
| advancement.constituent.write | Record the organisations that give and who the school deals with at each, and the details of its former students. | Advancement, Development manager |
| advancement.event.checkin | Read one event's guest list by name and tick a guest in at the door, with no contact detail. | Advancement, Development manager, Event volunteer |
| advancement.gift.read | Read the school's gifts, pledges and recurring gifts, its campaigns, and the opportunities it is working towards. | Advancement, Development manager, Advancement finance, Business manager |
| advancement.gift.write | Record a gift, void one with a reason, and keep the school's receiving entities, funds, campaigns, appeals and recognition societies. | Advancement, Development manager |
| advancement.grant.read | Read the school's applications to trusts and government programs, what each awarded and when each report is due. | Advancement, Development manager |
| advancement.grant.write | Record a grant application, the award it received and each report it asks for. | Advancement, Development manager |
| advancement.receipt.correct | Cancel an issued receipt and issue its replacement. | Advancement, Development manager, Advancement finance |
| advancement.report.aggregate | Read what the school has been given by fund, campaign and appeal, with no donor's name or gift. | Advancement, Development manager, Foundation board |
Assessment
| Capability | What it lets you do | Roles that start with it |
|---|---|---|
| assessment.config.write | Set the school's reporting periods, report templates, marking scales and curriculum outcomes. | Business manager, IT |
| assessment.markbook.read | Read the tasks set for a class, the results recorded against them and the averages they imply. | Teacher, Head of house or year, Principal and executive |
| assessment.markbook.review | List the tasks set in the departments this role heads, with who set each one, and each continuing student's estimated mark for next year in those departments' subjects, which this role may amend with a reason. Results aren't shown. | Principal and executive |
| assessment.markbook.write | Set a task, record and correct a result, write feedback, and override a calculated average with a reason. | Teacher |
| assessment.report.publish | Release a period's reports to families, and republish one that has been corrected. | Principal and executive |
| assessment.report.write | Write and amend the comments and grades on a student's report section. | Teacher |
| assessment.selection.write | Open a round of subject selection, offer subjects in it, and read the choices students have made and what each subject was asked for. | Registrar, Principal and executive |
| assessment.transcript.read | Read a student's or a former student's academic history across all the years the school has. | Registrar |
| assessment.transcript.write | Import the results a board or a previous system published onto the records of the students in them. | Registrar |
| assessment.vet.write | Read, add, amend and remove the VET qualifications students are enrolled in with an RTO, with the units and how the RTO reports each one. | Registrar |
| assessment.entries.write | Enter candidates for an awarding body's entry codes, export the entries file and mark it sent, which names each candidate with their legal name, sex, date of birth and identifiers. | Registrar |
Attendance
| Capability | What it lets you do | Roles that start with it |
|---|---|---|
| attendance.absence.write | Record why a student was away, approve an explanation a parent sent under a code, withdraw one recorded in error, and read the day's unexplained absences with the reasons parents gave. | Front office |
| attendance.movement.write | Record a student's late arrival or early departure at the office, withdraw one recorded in error, and read the day's arrivals and departures. | Front office |
| attendance.roll.override | Mark or correct any roll at any time, with a reason the audit trail records, where its teacher cannot. | Front office, Principal and executive |
| attendance.roll.read | Read which students were present, absent or late in each class, and who marked it. | Registrar, Front office, Teacher, Head of house or year, Wellbeing, Principal and executive, Business manager |
| attendance.roll.write | Mark a class roll you teach or cover, and correct it until the end of the lesson's day. | Front office, Teacher, Principal and executive |
| attendance.rule.write | Write the rules the nightly pass raises a flag against: what each counts, over how many days, how many it takes, which students it looks at and which roles are told. | Head of house or year, Principal and executive |
| attendance.visitor.write | Record a visitor arriving on site with the member of staff they came to see, and find a visitor signed in today to record their departure. | Front office |
Billing
| Capability | What it lets you do | Roles that start with it |
|---|---|---|
| billing.schedule.publish | Publish a draft schedule, after which no-one can change it and a correction is a new version. | Business manager |
| billing.schedule.read | Read each version of a year's fee schedule: its lines, what each costs and who pays it, and the instalment calendar it is billed on. | Registrar, Business manager |
| billing.schedule.write | Start a year's draft schedule or a correction to a published one, and add, change and remove its lines and its billing periods. | Business manager |
Child protection
| Capability | What it lets you do | Roles that start with it |
|---|---|---|
| childsafety.concern.read | Read a recorded concern, what was done about it and what was reported. | Child safety officer, Case manager, Deputy case manager, Chair of governors or proprietor, Principal and executive |
| childsafety.concern.write | Record a concern, the action taken and any mandatory report made. | Child safety officer, Case manager, Deputy case manager, Chair of governors or proprietor, Principal and executive |
| childsafety.allegation.write | In a school in England, record an allegation against an adult, refer it to the LADO and record how it ended. | Case manager, Deputy case manager |
| childsafety.allegation.govern | In a school in England, manage an allegation about the case manager, which no other role can open. | Chair of governors or proprietor |
Enrolment
| Capability | What it lets you do | Roles that start with it |
|---|---|---|
| enrolment.application.read | Read the applications a school has, where each has got to, and when a child applied, was offered a place, accepted, started, moved and left. | Registrar, Front office, Principal and executive |
| enrolment.application.write | Record an application, an offer, an answer to one, a start, a transfer or a withdrawal, open an intake, and void an event recorded wrongly. | Registrar, Front office |
| enrolment.assessment.read | Read which entrance assessment sessions are scheduled, who is sitting each one, and the result recorded against each applicant. | None of the shipped roles |
| enrolment.assessment.write | Schedule an entrance assessment session with its venue and supervisor, book an applicant into one, and record or correct their result. | None of the shipped roles |
| enrolment.coe.write | Read and record a student's Confirmation of Enrolment, the variations a provider reports in PRISMS, the study periods a course runs in, and who is responsible for a student under eighteen living away from their family. | Registrar |
| enrolment.enquiry.read | Read who has enquired, for which child, how they heard of the school, and what has happened since. | Registrar, Front office, Principal and executive |
| enrolment.enquiry.write | Record an enquiry, a tour and an application, which moves the child from enquiry to applicant on the record. | Registrar, Front office |
| enrolment.funding.write | Read and record a nursery child's funded hours in England, the 30 hours eligibility code, the early years pupil premium and its basis, and the disability access fund. | Registrar |
| enrolment.journey.write | Set up the timed messages a family receives after an enquiry, a tour, an application, a waitlisting or an offer, publish their steps, and set a journey live, pause it or archive it. | Registrar |
| enrolment.reference.restricted | Read and print a specialist's report about an applicant, or any reply the school keeps restricted. Each open is recorded in the audit trail. | None of the shipped roles |
| enrolment.reference.write | Ask a person for a reference or a specialist's report about an applicant with the family's consent, confirm a family's nomination, send, resend and withdraw a request, set up the kinds the school asks for, and read the references that come back. | Registrar |
| enrolment.settings.write | Set the criteria each intake's waitlist is ranked by and the order they are asked in, which reorders each waitlist the school has on its next read. | Registrar |
Forms
| Capability | What it lets you do | Roles that start with it |
|---|---|---|
| forms.definition.write | Draft the forms this school asks its staff, students and families to fill in, publish a version, issue the next version and retire one. | Business manager, IT |
| forms.run.act | Open a workflow and approve, decline, return or complete a step that's waiting on one of this person's roles or is assigned to them. | Registrar, Front office, Head of house or year, Wellbeing, Nurse, Principal and executive, Business manager |
| forms.submission.read | Read and print a completed form, including the answers this role's access level allows. | Registrar, Front office, Principal and executive |
| forms.submission.write | Start, save, submit and withdraw a form on the school's behalf, and attach the file a question asks for. | Registrar, Front office |
| forms.task.write | See the tasks assigned to this person, make one for a colleague, and reassign, complete, reopen or cancel one this person has or made. | Registrar, Front office, Teacher, Head of house or year, Wellbeing, Learning support, Child safety officer, Nurse, Principal and executive, Business manager, IT |
| forms.workflow.write | Draft the approvals a form or a record runs through, publish a version, issue the next version and retire one. | Business manager, IT |
Medical
| Capability | What it lets you do | Roles that start with it |
|---|---|---|
| medical.administration.write | Read the day's medications and doses, record that a medication was given, by whom, when and who witnessed it, and correct an entry in the log. | Nurse |
| medical.case.write | Read the day in sick bay, record a visit with what the child presented with and the treatment, tell the family, open a case over a child, add notes and follow-ups to it and close it. | Nurse |
| medical.immunisation.write | Record a child's immunisation statement and status, and read the status and the register of students to follow up. | Registrar, Nurse |
| medical.loan.write | Keep the health centre's loan register: add an item, lend it to a child with a date it is due back, mark a loan returned, and retire an item or offer it again. | Nurse |
| medical.plan.read | Read a child's anaphylaxis, asthma and other emergency action plans with their documents, what each medication a child takes is and where it is kept, and the camp pack for an excursion. | Teacher, Head of house or year, Nurse |
| medical.record.read | Read a child's conditions with their severity, detail and triggers, why a child is not permitted to do an activity, and each medication a child takes with its dose, its authority and the doses given. | Nurse, Principal and executive |
| medical.record.write | Record a condition, correct or close one, write the notice staff see beside the child's name, and record, change or close a medication a child takes. | Nurse |
| medical.restriction.write | Record that a child is not permitted to do sport, swimming, camp or another activity, and clear them for it again. | Nurse |
Reporting
| Capability | What it lets you do | Roles that start with it |
|---|---|---|
| reporting.dashboard.read | Open the dashboard for each role the reader holds, which runs each tile's report as at now. A tile whose report the reader may not run is absent for them. | Registrar, Front office, Teacher, Head of house or year, Wellbeing, Learning support, Child safety officer, Nurse, Principal and executive, Business manager, Privacy officer, IT |
| reporting.dashboard.write | Name a role's dashboard and arrange its tiles: which standard report each one runs, the parameters it fixes, and the order they are read in. | Principal and executive, Business manager |
| reporting.finding.read | Read what last night's read found: each student needing attention, the one line the raising layer wrote and the records behind it. A finding above the reader's tier is a count. | Registrar, Front office, Head of house or year, Wellbeing, Learning support, Child safety officer, Nurse, Principal and executive, Privacy officer |
| reporting.finding.resolve | Record that a finding has been dealt with, which takes it off the morning list. A later night raising the same subject and kind again opens a new finding. | Registrar, Front office, Head of house or year, Wellbeing, Learning support, Child safety officer, Nurse, Principal and executive, Privacy officer |
| reporting.library.run | Open the library of standard reports and run one the reader's own capabilities already reach, as at now or as at a date, and keep the file. | Registrar, Front office, Head of house or year, Wellbeing, Principal and executive, Business manager, IT |
| reporting.question.ask | Type a question and read an answer over the rows the asker's own capabilities reach, shown beneath it. What is in the record is sent to the provider the school named, so a school that has not turned question answering on refuses the question. | Principal and executive, Business manager |
| reporting.subscription.manage | Name an address that is told each time a kind of record changes, with the API token the integration reads the record through, and revoke one. Each delivery names the record and nothing in it. | IT |
Staff and accreditation
| Capability | What it lets you do | Roles that start with it |
|---|---|---|
| staff.check.read | Read the reference number on an adult's working with children check or teacher registration, and read a barred outcome. | Front office, Principal and executive, Business manager |
| staff.check.write | Record that someone looked up an adult's check on the state register and what they found, and correct a check already recorded. | Front office, Principal and executive, Business manager |
| staff.record.import | Upload an HRIS export or post its rows, which creates the staff it cannot match, opens and closes their staff affiliation, and records the checks the file contains. | Business manager |
| staff.record.read | Read who is on staff, the position and campus the school records for them, and whether each required check is current, expired or missing. | Registrar, Front office, Teacher, Head of house or year, Wellbeing, Counsellor, Learning support, Child safety officer, Nurse, Principal and executive, Business manager, IT |
| staff.record.write | Open and close a person's employment record, with the position, the campus and whether they are an employee or a casual. | Registrar, Business manager |
Timetable
| Capability | What it lets you do | Roles that start with it |
|---|---|---|
| timetable.booking.write | Book a room or a resource for part of a day, and cancel one's own booking. Cancelling someone else's booking also needs the structure. | Registrar, Front office, Teacher, Head of house or year, Wellbeing, Counsellor, Learning support, Child safety officer, Nurse, Principal and executive, Business manager, IT |
| timetable.class.write | Create and correct subjects, classes and houses, put students and staff in them or take them out from a date, and build next year's classes and approve a run, which writes the memberships. | Front office, IT |
| timetable.interview.write | Open a round of parent-teacher interviews, state when each teacher is available, and book a family into a slot or cancel a booking. | Front office, IT |
| timetable.record.read | Read the terms, which days are school days and their cycle days, the bell schedules, the rooms, the classes and who is in them, and the houses. | Registrar, Front office, Teacher, Head of house or year, Wellbeing, Counsellor, Learning support, Child safety officer, Nurse, Principal and executive, Business manager, IT |
| timetable.structure.write | Set the terms and the calendar days, and create and correct the bell schedules and the rooms. | Business manager, IT |
| timetable.variation.write | Record a relief, a room change, a merge, a cancellation or an extra lesson on a day, and void one the engine or the office recorded. | Front office, IT |
Wellbeing
| Capability | What it lets you do | Roles that start with it |
|---|---|---|
| wellbeing.alert.write | Set an alert on a student, with the line each member of staff reads beside their name and why, and end one. | Head of house or year, Wellbeing |
| wellbeing.award.write | Record an award, a prize, colours or a leadership position on a student with its certificate, and end a position the student is no longer in. | Head of house or year, Wellbeing, Principal and executive |
| wellbeing.case.write | Open a case on a student, change who works on it, and close it. | Head of house or year, Wellbeing |
| wellbeing.counselling.read | Read a student's counselling notes, what each says, and the counselling cases they are worked on. Without it, staff can't see that a note exists. | Counsellor |
| wellbeing.counselling.write | Record a session, a contact, a referral or a safety plan for a student from the school's template, and withdraw a note written in error. | Counsellor |
| wellbeing.instruction.read | Read what learning support asks a teacher to do in class for each student in a class the teacher takes that day, including as a relief teacher, and say whether it was used. | Teacher |
| wellbeing.nccd.read | Read a student's level and category of adjustment for the NCCD, which of the four areas have evidence, and when each consultation took place and with whom. | Head of house or year, Wellbeing, Learning support |
| wellbeing.nccd.restricted | Read why an adjustment was made, what a piece of evidence says and what a consultation settled. | Head of house or year, Wellbeing, Learning support |
| wellbeing.nccd.write | Record an adjustment for a student, review it each year, end it, and record the evidence and the consultations behind it. | Head of house or year, Wellbeing, Learning support |
| wellbeing.note.read | Read a student's merits, demerits, observations and incidents, who each involved, and the cases worked on them. Staff see that a restricted entry exists, but not what it says. | Teacher, Head of house or year, Wellbeing, Principal and executive |
| wellbeing.note.restricted | Read what a restricted entry says, such as an incident naming two children, and what a case is about. | Head of house or year, Wellbeing |
| wellbeing.note.write | Record a merit, a demerit, an observation or an incident about a student, and void one recorded in error. | Teacher, Head of house or year, Wellbeing |
| wellbeing.plan.write | Open a learning, behaviour, care, safety or return-to-school plan for a student from a template, write its goals, record progress against them, and review or end it. | Head of house or year, Wellbeing |
| wellbeing.provision.write | Record what a student is approved for in an exam, such as 25 per cent extra time, rest breaks, a separate room, a reader or a scribe, read the provisions on a student, and end one. | Learning support |
| wellbeing.rule.write | Set the rules that decide when an entry is escalated to a student's tutor or head of house, turn one off, and write the templates individual plans are opened from. | Business manager, IT |
| wellbeing.sanction.write | Issue a detention, a suspension, a probation or an exclusion against a student with why and the letter, void one issued in error, and schedule the sittings a detention is served at. | Head of house or year, Wellbeing |
Settings
An administrator composes roles from these capabilities on the "Roles" page of Settings, and gives a role to a person on the staff page.