VIEW
UNIVERSITY OF GEORGIA // UNIVERSITY HOUSING SYSTEMS STARREZ RBAC TELEMETRY v2026
INITIALIZING ACCESS ARCHITECTURE
00%
G
UGA UNIVERSITY HOUSING STARREZ // RBAC ARCHITECTURE
FERPA COMPLIant SCROLL // 000%
SYSTEMS & ASSIGNMENTS // ROLE PERMISSIONS BRIEFING
ATHENS, GA // 33.9480° N, 83.3773° W
STARREZ RBAC // 3 TIERS ACCESS
ARCHITECTURE • UGA HOUSING

Engineered on the Principle of Least Privilege. A high-precision breakdown of structural permission boundaries across Professional Staff, Desk Assistants (DAs), and RAs / RBAs—balancing front-line operational speed with strict FERPA student privacy.

// TECHNICAL SYSTEMS SUPPORT TEAM
Darrel Hormeku Systems App Programmer Principal
Mitchell Cassaday Systems App Programmer Specialist
Tanvi Kaurwar Systems App Programmer Specialist
SCROLL TO DRIVE TELEMETRY
KEYS: [1-5] JUMP SECTORS • [F] FULLSCREEN
UNIVERSITY OF GEORGIA HOUSING PRINCIPLE OF LEAST PRIVILEGE FERPA 34 CFR PART 99 COMPLIANCE REZ 360 ROLE-BASED ACCESS CONTROL IMMUTABLE AUDIT TRAIL
UNIVERSITY OF GEORGIA HOUSING PRINCIPLE OF LEAST PRIVILEGE FERPA 34 CFR PART 99 COMPLIANCE REZ 360 ROLE-BASED ACCESS CONTROL IMMUTABLE AUDIT TRAIL
SECTOR 01 // CORE GOVERNANCE

THE THREE PILLARS

Every StarRez user role is calibrated to provide exact operational tooling without exposing protected demographic, financial, or judicial student records.

01 RBAC CORE

Principle of Least Privilege

Permissions are scoped strictly to daily operational duties. Student staff receive exact front-desk or community tools without exposure to administrative overrides or historical records.

SCOPE // ROLE-LOCKED 13 AUDITED MODULES
02 FEDERAL LAW

FERPA & PCI-DSS Shield

Student billing ledgers, dispute transactions, behavioral case notes, and sensitive demographic indicators remain 100% isolated from peer student employees.

COMPLIANCE // 100% ZERO PEER LEAKAGE
03 FORENSICS

Immutable Auditability

Professional Staff retain exclusive access to the global Change Log to verify which accounts created, modified, or checked out keys, bookings, and packages.

LOGGING // REAL-TIME PRO STAFF EXCLUSIVE
SECTOR 02 // REZ 360 VIEWPORT SHOWCASE

ROLE ARCHITECTURE GALLERY

SCROLL VERTICALLY TO PAN ROLES [ TIER 01 / 03 ]
01
TIER 01 // FRONT DESK OPERATIONS

Desk Assistant (DA)

Front-line operational hub. DAs process couriers, verify external visitors and family members, manage lockout keys, and reference active shift situation logs.

8 / 13
Active Tabs
VISIBLE
Family & Sit. Log
FULL
Engagement Widget
Rez 360 (Standard) Bookings Addresses Parcels Resources Family Members Situation History Financials Notes & Detail
STARREZ // DA_PERMISSIONS.JPEG ● LIVE PRODUCTION VIEWPORT
Desk Assistant StarRez Permissions View
[+] CLICK TO INSPECT FULL SCREENSHOT
02
TIER 02 // PEER COMMUNITY MENTORSHIP

RA & Residential Belonging (RBA)

Peer-centered living community support. Family records and incident response logs are intentionally hidden to preserve resident personal boundaries and mentorship trust.

6 / 13
Active Tabs
HIDDEN
Family & Sit. Log
STREAMLINED
Omits Last Comm.
Rez 360 (Streamlined) Bookings Addresses Parcels Resources Family Members Situation History Financials
STARREZ // RA_RBA_PERMISSIONS.PNG ● PEER MENTOR VIEWPORT
RA and RBA StarRez Permissions View
[+] CLICK TO INSPECT FULL SCREENSHOT
03
TIER 03 // FULL ENTERPRISE ADMINISTRATION

Professional Staff (Admin)

Unrestricted vertical access across academic years. Includes sensitive demographic indicators (Birth Gender, Housing Restrictions), financial ledgers, applications, and audit trails.

13 / 13
Active Tabs
EXTENDED
Demographics
READ/WRITE
Full Audit Trail
Rez 360 (Extended) Notes & Detail Account & Dispute Applications & Timeslots Portal Activity Change Log (Audit Trail)
STARREZ // PRO_STAFF PERMISSIONS.PNG ● ADMINISTRATIVE VIEWPORT
Professional Staff StarRez Permissions View
[+] CLICK TO INSPECT FULL SCREENSHOT
13 AUDITED INTERFACE MODULES DA: 8 VISIBLE / 5 LOCKED RA & RBA: 6 VISIBLE / 7 LOCKED PRO STAFF: 13 UNRESTRICTED
13 AUDITED INTERFACE MODULES DA: 8 VISIBLE / 5 LOCKED RA & RBA: 6 VISIBLE / 7 LOCKED PRO STAFF: 13 UNRESTRICTED
SECTOR 03 // LIVE RBAC TELEMETRY SIMULATOR

MASTER PERMISSIONS MATRIX

Toggle active role telemetry or filter by permission boundaries to inspect exact data exposure rationales across all 13 StarRez modules.

ALL ROLES
ACTIVE TELEMETRY PROFILE
13 / 13
ACCESSIBLE MODULES
5 LOCKED
STUDENT STAFF RESTRICTIONS
TIERED
REZ 360 DEMOGRAPHIC SCOPE
Interface Tab / Data Scope Desk Assistant (DA) RA / Belonging (RBA) Professional Staff Institutional & Operational Rationale
SECTOR 04 // STUDENT STAFF DIVERGENCE

DESK ASSISTANT VS. RA / RBA

Why do two student employee roles have different visibility inside StarRez? Their permissions mirror their distinct operational mandates.

FRONT DESK MANDATE

Desk Assistants (DAs)

Stationed at physical hall reception points where external verification and shift continuity are critical.

Family Members Tab VISIBLE

DAs interact directly with external visitors, parents, and couriers at the front desk, requiring verified relationship context.

Situation Response History VISIBLE

Enables front-desk personnel to reference active desk instructions and incident logs across staff shift changes.

Engagement Summary FULL TIMELINE

Displays Last Communication timestamp alongside Last Portal Login and active Package counts.

VS
COMMUNITY MENTOR MANDATE

RAs & RBAs

Peer mentors living inside the residential community where personal boundaries and peer trust are paramount.

Family Members Tab HIDDEN

Withheld to protect resident personal and family boundaries from peers living on the same floor or hall.

Situation Response History HIDDEN

Restricted so peer interactions remain centered on belonging and community mentorship rather than administrative surveillance.

Engagement Summary STREAMLINED

Shows only Last Portal Login and Packages, omitting direct university communication history metrics.

SECTOR 05 // ENTERPRISE SECURITY BOUNDARIES

STRICT NO-ACCESS ZONES

All student employees (DAs, RAs, and RBAs) operate under hard-coded security lockouts across four high-sensitivity administrative domains.

VAULT ZONE 01 // PCI-DSS & FERPA 🔒 PRO STAFF ONLY

Financial & Billing Records

Complete student staff lockout from account ledger balances, payment receipts, fee disputes, and rate structure adjustments under strict financial compliance.

VAULT ZONE 02 // PROTECTED CONDUCT 🔒 PRO STAFF ONLY

Judicial & Behavioral Records

Zero student staff visibility into internal conduct files, sensitive staff case notes (Notes & Detail), mediation logs, or administrative restriction flags.

VAULT ZONE 03 // CONTRACT INTEGRITY 🔒 PRO STAFF ONLY

Application & Assignment Overrides

Student staff cannot alter room assignments, execute manual room swaps, modify selection timeslots, or edit future housing application data.

VAULT ZONE 04 // SYSTEM FORENSICS 🔒 PRO STAFF ONLY

Administrative Audit Tools

Immutable Change Log and system-wide user activity histories remain exclusively reserved for Professional Staff oversight and forensic accountability reviews.