> ## Documentation Index
> Fetch the complete documentation index at: https://docs.goguardian.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Hall Pass User Roles and Permissions

> What each Hall Pass role can do: Student, Staff, and Site Admin. How roles determine access to passes, settings, and reports.

GoGuardian Hall Pass has three system-level roles: Student, Staff, and Site Admin. Each role controls what a user can do when they sign in, which views they can access, and which settings they can change. Roles are assigned through GoGuardian Org Management, not inside Hall Pass itself.

## Compare Roles at a Glance

| Capability                                                            | Student | Staff | Site Admin |
| --------------------------------------------------------------------- | ------- | ----- | ---------- |
| Request a pass                                                        | Yes     | No    | No         |
| View own pass status                                                  | Yes     | —     | —          |
| End own pass (if site allows)                                         | Yes     | —     | —          |
| Create passes for students                                            | No      | Yes   | Yes        |
| Approve, reject, cancel, or end passes                                | No      | Yes   | Yes        |
| Configure auto-approve for rooms they manage                          | No      | Yes   | Yes        |
| Use a kiosk PIN on shared devices                                     | No      | Yes   | Yes        |
| Access Hall Monitor (school-wide pass view)                           | No      | Yes   | Yes        |
| Configure rooms and locations                                         | No      | No    | Yes        |
| Manage site settings                                                  | No      | No    | Yes        |
| Define rule sets (Time Restrictions, Out-together Rules, Group Rules) | No      | No    | Yes        |
| Create recurring passes                                               | No      | No    | Yes        |
| Run Reports and Smart Reports                                         | No      | No    | Yes        |

## Understand the Student Role

Students can request passes, check the status of an active pass, and end their own pass if the site setting **Allow Students to End Passes** is turned on. They cannot create passes for other students, approve or reject passes, or access any management views.

Students see only student-facing pass workflows. They do not have access to the sidebar options that staff and administrators use to manage passes, rooms, or rules.

## Understand the Staff Role

Staff includes teachers, office staff, and hall monitors. From their Hall Pass view, staff can:

* Create passes for students in their classroom or assigned rooms
* Approve, reject, cancel, or end passes they are responsible for
* Configure auto-approve settings for rooms they manage
* Use a kiosk PIN to run Hall Pass in kiosk mode on a shared device
* Access **Hall Monitor**, which shows all active passes across the school in real time

Staff cannot change site-level settings, manage room configurations, define rule sets, create recurring passes, or run reports. Those capabilities require the Site Admin role.

## Understand the Site Admin Role

Site Admin is the configuration role for Hall Pass. Site Admins have all Staff capabilities plus:

* Configure rooms and locations (create, edit, and close rooms; manage room categories; assign staff to rooms)
* Manage site settings (site capacity, pass duration limits, student pass limits, time-between-passes, student permissions, location options)
* Define rule sets, including Time Restrictions, Out-together Rules, and Group Rules
* Create and manage recurring passes for students with predictable movement needs
* Run Reports and Smart Reports to review pass activity across students, staff, and locations

Site Admin is the appropriate role for building administrators, IT administrators, and any staff member responsible for configuring Hall Pass for a school.

## Understand Hall Monitor Access

Hall Monitor is a view, not a separate role. Staff and Site Admin users can access **Hall Monitor** from the Hall Pass sidebar. It shows all active, overtime, and expired passes across the site in real time. There is no separate "Hall Monitor" role assignment in Org Management.

To learn more about the Hall Monitor view, see [Use Hall Monitor](/products/hall-pass/hall-monitor).

## Understand How Roles Are Assigned

Roles are assigned in GoGuardian Org Management using OU mappings or individual user mappings. An OU mapping connects a directory path (from Google Admin Console or Active Directory) to a Hall Pass site and role. An individual user mapping overrides the OU mapping for a specific person.

For step-by-step instructions, see [Add Users to GoGuardian Hall Pass](/products/hall-pass/add-users-to-hall-pass).

## Resources

* [Add Users to GoGuardian Hall Pass](/products/hall-pass/add-users-to-hall-pass)
* [Set Up Hall Pass in Org Management](/products/hall-pass/set-up-hall-pass)
* [Review Site Settings](/products/hall-pass/site-settings)