Module access levels
Every role has a level per module: None, Read, Write or Full. A person's access is the highest level across their main role and any additional roles — roles only ever add, so two roles can never contradict each other.
Seeded roles: Administrator, HR Manager, Payroll Admin (prepares payroll), Payroll Approver (signs it off), Sales Manager, Sales Executive and Read Only. Edit them or add your own under Organisation › Roles.
Managers need no permission
A manager automatically reads their reports' attendance, leave and work, and decides their requests, because being somebody's manager is a fact of the org chart. Interview panels and hiring managers reach a job the same way.
Special permissions
| Special permission | What it unlocks |
|---|---|
| PII view | Unmasked PAN, Aadhaar, bank account and UAN |
| Salary view | Every salary figure other than your own payslip |
| Payroll approve | Signing off a payroll run |
Things nobody can do
- Approve their own request.
- Edit their own roles or their own payroll profile.
- Approve a payroll run they computed.
- Grant a level they do not hold themselves.
- Write into a locked pay period.