Managing Tenants and Schools

This is a Platform Super Administrator function — it operates above individual School Administration and affects every tenant on the network. It covers onboarding a new school, and the role-based access controls that scope what each admin can see.

Prerequisites and permissions

• A Platform Super Administrator account (the top-level Admin role).
• Step-up authentication (MFA) is required for tenant-level changes.

Steps

1. Open Platform Configuration → Tenants.
2. Select Onboard School to register a new tenant — this creates the school's isolated data scope before any people or classes can be added to it.
3. Assign the school's first School Administrator account. This person will manage People Directory, enrollment and class setup for that school going forward.
4. Under Roles & Privileges, confirm the correct role is assigned — School Administrator scope is isolated to their own school by default and cannot see other tenants' data.
5. Use Feature Flags if the school needs early or restricted access to a specific capability (e.g. a curriculum module still in controlled rollout).

Verification step

The new school appears in the Tenants list with an active status, its assigned School Administrator can sign in and see only that school's data, and the change is visible in the Audit log.

Troubleshooting

• New School Administrator can't sign in: confirm their account activation email was sent and completed.
• A school sees another school's data: treat this as a security incident — escalate immediately and check the Audit log for the role assignment that caused it.
• Feature flag not taking effect: flags can take a few minutes to propagate; confirm the flag is scoped to the correct tenant.

Owner: AI2N.ai Product & Platform Team · Revision 1 · Last reviewed 2026-08-29