Overview
Navigate to Settings > User Roles to manage access control for your organization. The role system provides five layers of permission configuration for complete control over who sees and does what.
Pre-configured Roles
| Role | Access Level | Typical Assignment |
|---|---|---|
| Administrator | Full access to everything — all modules, all actions | IT admin, company owner, super user |
| Employee | Self-service only — own attendance, salary, requests | All regular staff |
| Front Desk | Reception and visitor management — basic contact and attendance access | Receptionists, security |
| HR Manager | Full HR and payroll access — employee records, HRMS, reports, approvals | HR department heads |
| Manager | Team management — approve requests, view team data, department reports | Department managers, team leads |
Creating a Custom Role
- Click the + button next to "User Roles" in the left panel
- Enter a descriptive role name (e.g., "Payroll Accountant", "Shift Supervisor")
- Configure Menu Access — toggle View/Create/Edit/Delete/Export/Approve for each menu item individually
- Configure Dashboard — select which KPI cards, charts, and widgets this role can see
- Configure Notifications — set which alert types this role receives (attendance exceptions, approvals, announcements)
- Configure Data Scope — choose visibility: Own Data (personal only), Department (team data), or Organization (all data)
- Configure Field Visibility — show or hide specific fields in forms (e.g., hide salary details from managers)
- Click Save Menu Access
Note: Expandable menu items like Shifts, Salary, and HRMS show "collapse" labels — expand them to set sub-item permissions individually. For example, you can give a role access to "Create Shift" but not "Schedule Shift".
Important: Role changes take effect immediately for all users assigned to that role. Test permission changes with a non-critical role before applying to production roles.
Tip: Create role templates for common organizational structures: "Payroll Accountant" (salary + reports access), "Shift Supervisor" (attendance + shifts access), "HR Recruiter" (recruitment + contacts access).