...
System.Capability.CanViewOrgProfileField should be on the org page for OrgAdmin : ALLOW : IsInstructor() and the ORG-Adminstrators group - or it could also be a more general permission group like IsLoggedIn()
System.Capability.CanViewRegistrations should be on the org page for OrgAdmin : ALLOW : IsInstructor() and the ORG-Adminstrators group
System.Capability.CanEditRegistrations is then the final permission needed to enable the Attendance App and this is not something we generally put as standard on the org page. Therefore we can use this to enable the Attendance app by putting it on the course home page for ones where customers want to use this feature.
NOTE: to work for SuperAdmins these will also need to be exist on the Root page.
OrgProfileField filtering
...