> ## Documentation Index
> Fetch the complete documentation index at: https://docs.supportwise.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication and access control

> Understand how SupportWise authenticates users, scopes workspace access and applies role-based permissions across school environments.

SupportWise separates authentication from authorisation. Authentication establishes who the user is, while SupportWise workspace memberships and permissions determine what that user can access.

## Authentication

SupportWise currently supports password-based authentication, Google sign-in and Microsoft Entra Sign-in for authorised users. Authentication options may vary by deployment and school configuration.

## Authorisation

Access is controlled through:

* workspace memberships;
* role and permission groups;
* learner and year-level scope where configured;
* linked support-staff or teacher records for their respective portals; and
* revocation of memberships and invitations when access is no longer required.

A successful sign-in does not automatically grant access to a school workspace.

## School-managed access lifecycle

Schools should nominate authorised administrators to manage invitations, roles and offboarding. When a staff member changes role or leaves the school, their SupportWise access should be reviewed and revoked as part of the school's normal offboarding process.

## Least privilege

Assign users only the permissions required for their role. SupportWise supports granular permissions so administrative capability does not need to be granted to every user.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.