For school management
Per-role and per-person permissions are defined here; who sees which record and what they can change is written on the staff file itself.
The benefit: Permissions are granted from one place, a single permission can be given to a single person, and nobody opens a record they aren't entitled to.