Skip to content

Permission Matrix

The Permission Matrix defines what each role is allowed to do inside a school.

Permissions are organized into several categories, each controlling a specific area of the platform.

Roles are granted permissions from these categories.
Members inherit permissions from the roles assigned to them.


Permissions in Hischool are grouped into the following categories:

  • General Permissions
  • Event Permissions
  • Course Permissions
  • Thread Permissions
  • Membership Permissions
  • Messaging Permissions

Each category controls a different part of the system.


General permissions control core administrative capabilities of the school.

These include:

  • View Groups — Allows viewing existing groups in the school.
  • Manage Groups — Allows creating, editing, or deleting groups.
  • Manage Roles — Allows creating and editing roles.
  • Manage Permissions — Allows modifying permission settings for roles.
  • Manage Emojis — Allows managing custom emojis used in the school.
  • Manage School — Allows managing core school configuration.

These permissions are usually restricted to higher-authority roles.


Event permissions control school events and scheduling features.

These include:

  • Create Event — Allows creating new events.
  • Manage Events — Allows editing or removing existing events.

Course permissions control course creation and management.

These include:

  • Create Course — Allows creating new courses.
  • Manage Courses — Allows editing, organizing, or removing courses.

Thread permissions control discussion posts and threads.

These include:

  • Post Thread — Allows creating new discussion threads.
  • Manage Threads and Posts — Allows editing or deleting threads and posts.

Membership permissions control member management and identity actions.

These include:

  • Invite Others — Allows inviting new members to the school.
  • Change Nickname — Allows members to change their own nickname within the school.
  • Manage Nicknames — Allows modifying other members’ nicknames.
  • Change Avatar — Allows members to change their school-specific avatar.
  • Remove Avatars — Allows removing member avatars.
  • Ban Members — Allows permanently banning members from the school.
  • Kick Members — Allows removing members from the school.
  • Timeout Members — Allows temporarily restricting a member.
  • Assign Roles — Allows assigning roles to members.

Messaging permissions control communication inside groups and conversations.

These include:

  • Send Messages — Allows sending messages in groups or chats.
  • Manage Messages — Allows editing or deleting messages from others.
  • Send Embeds — Allows sending embedded content such as links or previews.
  • Upload Files — Allows uploading attachments or files.
  • Use Reactions — Allows reacting to messages using emojis.
  • Masquerade — Allows sending messages with a different displayed identity (if supported).

When a new school is created, the default role @everyone is automatically assigned to all members.

By default, the following permissions are enabled for the @everyone role:

  • View Groups
  • Invite Others
  • Change Nickname
  • Change Avatar
  • Send Messages
  • Send Embeds
  • Upload Files
  • Use Reactions

These permissions allow members to participate in the school’s communication and collaboration.

School administrators may modify these permissions depending on the governance model of the school.


When configuring permissions:

  • Keep @everyone permissions minimal but functional.
  • Grant administrative permissions only to trusted roles.
  • Separate moderation roles from administrative roles.
  • Regularly review permission settings as the school grows.

A well-configured permission matrix helps maintain security, organization, and stability within the school.