Access is the closed-beta gate. Anyone who signs up with Google or an email address lands as waiting and cannot use the platform until approved here — unless they arrived with a working class code, which admits them automatically and shows as via invite. Blocked shuts an account out without deleting anything, and can be undone.

Role controls platform-wide access from the shared DB: admin can do everything (incl. signing in to THIS portal), teacher can do everything a student can plus the teacher portal, student is the default. Promoting to teacher/admin auto-grants educator access; the Educator toggle remains for student accounts that only need the teacher portal.

Subjects gate what students can see and enrol in. Keep a subject OFF until its curriculum is ready (sub-topic grouping seeded) — students on an inactive subject would land on a broken ungrouped lessons view.