Can I limit what my staff can access?

Yes. The tenant panel uses roles, and the role decides what may be opened and changed — including a restriction to a specific branch, so staff at one branch do not see another branch's students and invoices.

Beyond staff the boundaries are firmer still: teachers see only the classes they teach, and parents only their own children. All three are enforced in the data layer, not by hiding a menu.