# Catalyst Role-Based Access Matrix

Status: Required before pilot. Draft public summary.

| Role | May access | Must not access by default |
|---|---|---|
| Student | Own dashboard, artifacts, feedback, and portfolio | Other students' records or reports |
| Counselor | Assigned students, review queues, rubric comments, intervention flags | District-wide identifiable data outside assignment |
| Teacher/educator, if enabled | Assigned course/cohort content and allowed progress signals | Sensitive counselor notes unless authorized |
| School administrator | Aggregate school reports and implementation status | Unnecessary student-level PII unless authorized |
| District evaluator | Aggregate district reports and Day 30/60/90 evidence | Student-level detail unless explicitly authorized |
| Support admin | Minimum necessary support/security access | Unrestricted browsing of student records |