1. Access and Scope
Institution admins operate only inside their own institution boundary.
Sign in to Admin Console
Objective: Confirm you have institution-admin access before making changes.
Procedure
- Open app.cognicampus.com in a clean browser session (preferably a dedicated profile for admin work).
- Enter your institution-admin email and password on the login screen.
- Submit login and wait for session initialization to complete.
- If login does not move forward, verify credentials first, then retry after refreshing once.
- After successful authentication, open /admin directly if you are not redirected there automatically.
- Verify that the Admin sidebar is visible on the left and contains all expected menus.
- Confirm these menus are present: Dashboard, Programs, Courses, Users, Policies, Subscription, and Settings.
- Check the top header and confirm the institution name matches the institution you are supposed to manage.
- If institution name is incorrect, stop immediately and sign out before doing any create/update/delete action.
- Open Dashboard and wait for KPI cards and charts to load; this confirms role access and session health.
- Open Users page and confirm student/faculty/admin tabs load without authorization errors.
- Open Programs and Courses pages briefly to confirm read access across core admin modules.
- Keep this quick access check as your daily first step before operational tasks.
- If any admin page returns unauthorized/forbidden unexpectedly, re-login once and then escalate with screenshots and time of failure.
Understand role limitations
Objective: Avoid actions that belong to system-level administration.
Procedure
- Institution Admin actions are constrained by `profiles.institution_id`; all core admin screens and APIs are intended to operate within that institution.
- Treat every create/update/delete as institution-scoped, even when the UI shows global-looking identifiers.
- Do not attempt cross-institution data fixes manually; if a user/program/course belongs elsewhere, escalate to platform support.
- Before bulk operations, verify row ownership and mappings (program, cycle, and course) so writes stay in your institution scope.
- Faculty and student assignment flows assume same-institution entities; do not mix records from separate institutions.
- Use least-privilege admin behavior: add only required admins and avoid unnecessary account proliferation.
- The last institution admin cannot be deleted by API; still, operationally keep at least two valid admins for continuity.
- For ambiguous behavior, run a small controlled update first (single record) before any bulk action.
- If you see Unauthorized or Forbidden on expected routes, re-check session and active account before retrying.
- Escalate with route, timestamp, institution, and affected record IDs when scope-related errors persist.