Running a Challenge involves more than entering pupils. Schools need to share work between colleagues, keep records private and know that the right people can access the right information. The latest BMSAQ release brings those responsibilities into a more clearly defined Organiser Portal.
One school, with a role for each colleague
School accounts now distinguish between the Primary Organiser, Co-organisers, Finance colleagues, Head Teachers and School Observers. Each role has access suited to its responsibilities. A bursar can work with orders and billing without needing access to the same student information as a Challenge organiser.
The Primary Organiser can invite colleagues and review their access from School team. Invitations connect a colleague to the intended school and role. When responsibilities change, schools can update access without sharing a single password between several people.
Checks behind the screen
Access checks take place in the service that handles the request, as well as in the pages you see. School records and private resources are checked against the signed-in account and its school permissions. Hiding a button alone is not treated as permission control.
Challenge access, student results and purchased practice resources also have their own access routes. Payment confirmation and purchase records are checked before paid practice resources are released. Please keep download emails and individual attempt links private: they are intended for the purchaser and the people they are preparing with.
Clearer verification and recovery
Registration, email verification and password recovery now have clearer instructions. Verification confirms ownership of an email address, while recovery helps someone regain access without revealing whether an address belongs to another person’s account.
The new BMSAQ verification page gives a clear outcome and a route back to the portal. Staff joining through an invitation should return to that invitation when prompted, so their verified account can be connected to the correct school.
Organiser and student-account sign-in screens also offer recovery guidance after repeated unsuccessful password attempts. A short pause in that browser encourages people to reset a forgotten password or ask for help. This browser guidance works alongside the authentication service’s protections.
Helpful guidance without extra data access
Invited colleagues can use Benji for general BMSAQ questions, even when their role does not allow school data to be shared with the assistant. That general-guidance mode does not retrieve school orders, student records or results. The permissions that protect those records remain in place.
A quick check for your school
Review your colleagues in School team, check your account’s email address and use your own sign-in details. Never send a password, authentication code or pupil access code in feedback or a chat. If someone cannot access a feature they need, ask your Primary Organiser to review their role or contact BMSAQ.