Security and access
Users, roles, permissions, and the audit log are enforced by the API. Session lifetime is not an editable setting.
Platform configuration that has a backend store is linked below. Sections without a settings table stay unavailable and are not saved in this browser.
Workspace preferences are browser-local. Linked modules open their own pages. Unavailable cards have no API store.
Workspace preferences for this browser. Server branding and payment gateway settings are not exposed here.
Language for this browser only. Display timezone is fixed.
Display timezone is Asia/Dubai. Financial amounts stay currency-separated.
Press Ctrl/Cmd + K anywhere to open global search.
UAE Dirham (AED) is the only currency for new records. Historical payments keep their original currency and amount. Balances are never combined or converted here.
The currency catalog could not be loaded.
Users, roles, permissions, audit, and Test OTP. Permission changes are auditable.
Users, roles, permissions, and the audit log are enforced by the API. Session lifetime is not an editable setting.
Manage non-production Test OTP allowlists for Institution and Parent phone sign-in. Production environments always reject Test OTP.
Operational money pages. Gateway secrets are not editable here.
AED is the only platform currency. Its minor unit is listed above. Historical amounts stay in the currency they were stored in.
Bank accounts are managed on their own page. Gateway secrets are not shown after save, and card collection stays disabled while payment schema fields are missing.
In-app notifications are linked. SMS and email credentials are unavailable.
In-app notification records can be reviewed. Channel preferences for SMS and email are not configurable yet.
Provider credentials, sender ID, and templates are not stored in an admin settings service. This page does not send a test SMS.
SMTP host, password, and templates are not exposed. This page does not send a test email.
Branding is file-backed. Other appearance fields still follow the deployed theme.
Platform name, logo, and receipt taglines are managed in Branding. Favicon and date format stay on the deployed theme.
Colors and dark mode stay on the deployed theme. Logo and platform name are edited under Branding.
Academic years belong to a school. Platform-wide terms and enrollment periods are not modeled.
Payment gateway, SMS, and email credentials are not stored for this screen. Institution login stays blocked until users.institution_id exists.