Sign-in and allowlist
One sign-in, email allowlist for admin
Students and operators use the same Google or Microsoft sign-in page. There is no separate admin password. After sign-in, the platform checks your email against server allowlists.
Student path
Learner — opens dashboard, study routes, and onboarding after the 8 setup steps.
Admin path
Operator — opens /admin when your signed-in email is listed in SWITCH_AUTH_ADMIN_EMAILS or SWITCH_AUTH_EDITOR_EMAILS.
Admin allowlist
3
emails in SWITCH_AUTH_ADMIN_EMAILS
Editor allowlist
2
emails in SWITCH_AUTH_EDITOR_EMAILS
Your access
Student
Sign in to resolve roles
Add operator emails in SWITCH_AUTH_ADMIN_EMAILS and SWITCH_AUTH_EDITOR_EMAILS on the server, then redeploy. Students do not need to be listed.