Managing staff

Invite teachers, assign roles, recover departing staff's vaults, and keep your roster clean. This is one of the parts of TSNC you'll touch every fall.

The roles, plain English

TSNC has more roles than you probably need on day one. Here's what each does:

• Principal — full org admin. Same powers as IT Admin. The role is mostly cosmetic; we suggest using it for the actual principal so emails to the org show their name.
• IT Admin — full org admin. Use this for whoever handles tech: an IT director, an ops person, even a tech-savvy teacher.
• Teacher — receives phishing simulations, has personal vault access, can't change settings or invite others.
• Staff — same as Teacher, just a different label for non-teaching staff.
• Pastor — same access as Teacher. Useful when a parish priest is involved with school operations.
• Parent — receives no campaigns, no vault. Only used in family-side flows; not common at the school level.

Inviting staff

1. 1
   Open Staff → Invitations

   Click + Invite Staff at the top of the staff page, or use the Invitations tab in the sidebar.
2. 2
   Add their info

   Email and name are required. Pick a role (default: Teacher). You can invite multiple people at once by pasting a list of emails.
3. 3
   They get an email

   The invitation email includes a magic-link to set their password and confirm. The link is good for 7 days; after that, you re-send.
4. 4
   They show up in Staff

   Once they accept, they appear in your roster as Active. Until they accept, they're Pending — which doesn't count toward your license.

When a staff member leaves

Departing staff is the most consequential staff workflow. Done wrong, you lose access to important shared accounts. Done right, the departure is graceful for everyone.

The right order: recover, then deactivate

1. 1
   Recover their vault first (if needed)

   If the departing teacher had passwords for shared accounts (Google Workspace admin, PowerSchool, social media), use Vault Recovery to copy those entries into your vault before deactivating. See Password manager → Recovery.
2. 2
   Offer them the migration option

   If they had personal passwords mixed in, they can migrate to a personal TSNC account at a 50% / 25% discount over 90 days. Don't skip this — it's the kind of gesture that makes departures amicable.
3. 3
   Deactivate via the staff page

   Click the staff member, click Deactivate. If they have an in-flight migration, you'll be warned and given the option to wait or force-cancel.
4. 4
   Verify in Activity Log

   Your deactivation appears in the Activity Log. If you need to undo it (rehire, mistake), any peer admin can revert it from there.

Roles and faith traditions

If your org's faith tradition is set to Catholic, the role names Principal, Pastor, and Business Manager appear that way. If you're Christian (non-Catholic), Jewish, Muslim, or Secular, you can customize the labels in Org Profile → Leadership. The underlying permissions don't change — only the displayed label.

FAQ