Who can open each HR screen

A screen opens only when the person’s role includes that permission. The permission list is stored in the system. It is not a fixed bundle hidden in the page. Super Admin chooses what the shared roles receive. A company then builds its own roles from that same list.

Super Admin

Super Admin is the platform account. From Access, they edit the permissions and then assign those permissions to three shared roles:

• Company Admin runs a company. Tick the modules that company should be able to use, such as employees, leave, or payroll.
• HR is a profile with no company. This account posts jobs and reviews candidates. Tick job posts, applications, and resume download if that is the work they do. Do not tick payroll unless they really run pay for a company.
• Employee with no company is a job seeker. Tick apply for jobs if they should browse open roles. They do not need attendance or payroll.

Company roles

Company Admin opens Roles and creates a name such as HR-Manager. The checkboxes are the permissions that already exist in the system. Tick only what that job needs. Assign the role to a person from Assign roles. That person then sees those menus and no longer sees the ones you left unticked.

Example. HR-Manager can approve leave and review applications, and cannot open salary structures. A Payroll officer can run the month and cannot publish jobs. An employee with no extra role checks in, applies for leave, and reads their own payslip.

One person, one role

Assigning a role replaces the person’s previous role. If someone needs both leave approval and payroll, tick both permissions on one role. Do not expect two roles to combine.

What this does not do

A permission does not create the underlying record. Granting payroll lets the person open the payroll screen. They still need salary structures, attendance, and holidays before the numbers mean anything. Granting job posts lets them publish. It does not write the job description for them.