A substitute’s job is to keep instruction safe and continuous—not to browse every field in a student profile. Yet many schools over-share because it feels faster than configuring role-based access for short credentials. That creates privacy risk and training debt every time a guest signs in.
Time-bound access tied to sections
Issue accounts that expire automatically at the end of the assignment and map to the same sections your master schedule already publishes. Substitutes see seating, accommodations flags they must honor, and attendance tools—nothing more.
Handoffs that attendance teams trust
When coverage changes mid-day, attendance must follow the real adult in the room. Align bell schedules with attendance policies so front offices are not reconciling paper sign-in sheets. Deeper patterns live in who should see what guidance.
Documentation for auditors
Log each activation and termination of guest access. That evidence matters if a family asks who viewed a record on a specific day.
Partner agencies and long-term assignments
When districts use staffing agencies, coordinate identity proofing and background checks in one workflow so badges and system access activate together. Long-term substitutes may need gradebook rights for a semester—different from a one-day login. Capture those patterns in your coverage playbook so help desks are not improvising each Monday. Review access quarterly with HR and principals together; the goal is confident teaching, not maximum visibility.
Offer lightweight mobile views for rosters so guest teachers are not logging in from personal devices to full admin consoles they do not need.