We have 4 high school, 8 middle schools.
Our high school counselors would like to be able to check the grades for the students assigned to them. Is there a way to limit the ability to loginas for the counselors? With a few thousand students and a couple dozen counselors, assigning 'mentor' role to the counselors would be a headeache.
We use LDAP for enrollment information. I was thinking of creating an LDAP group for each school, then make all the counselors 'teachers' of that class(LDAP group). Could the permissions be set to allow the counselors to login as the student, but block them from other school's students?