Roles and permissions
What org admins, HR admins and line managers can see and do in the admin portal, and who sees pay.
Access to the admin portal depends on a person's role. Admins run the organisation. Line managers see their own team's leave and nothing else. Everyone else uses the employee app only.
Where to find it
Roles are set on each person's record under Employees, in the platform access section. See Invites and access for the steps.
The roles
| Role | What they can do |
|---|---|
| Org admin | Everything in the admin portal for your organisation, including pay, exports and granting access to others. Can also use the employee app. |
| HR admin | Full access to the admin portal, including pay, exports and granting access to others. |
| Line manager | Signs in to the admin portal and sees a "My team" section with one item, Leave, showing only their own direct reports' requests. |
| Employee | Uses the employee app only. Anyone without an admin or line manager role who tries the admin portal is sent back to the sign-in page. |
Admins see every module that is switched on for your organisation. A module that is off does not appear for anyone, admins included. Modules are switched on and off by us, on request.
Who sees pay
Salary, bonus, commission, long-service award, employer pension and each person's Total Reward sit on the employee record in the admin portal. HR admins and org admins can see and edit them. The roster download, which is also the Employee report in Reports, includes salary and is for admins only.
Line managers never see pay. Their view of the portal is limited to leave requests.
Your people can update only their own preferred name, personal email, phone, address and notification preferences from their app. Pay, job title, department and the rest of their record stay with you.
Line managers in more detail
A line manager's portal shows the leave requests of the people who report to them, set by the line manager field on each employee's record. They can approve or reject a request, giving a reason when they reject one, and decide on requests to cancel approved leave. The scope is enforced in the database, so a line manager cannot reach anyone else's requests.
When one of their reports asks for leave, the line manager gets an email and an in-app notice with a link straight to the request. If the line manager has no account yet, or no access to review, your HR admins and org admins are told in the app instead, so a request is never stuck with nobody able to act on it.
Line manager access is given automatically the first time someone gets a direct report, and when someone with direct reports signs in for the first time. It is never removed automatically.
Granting and removing access
- Any admin can grant or remove org admin access on a person's record, once that person has signed in at least once.
- You cannot remove your own admin access. Another admin has to do it.
- Line manager access can be granted or removed on the record too, with a confirm step.
Questions
No. Line managers only see leave requests from their own direct reports.
No. Access is by role, and there is no reports-only role. Admins see every module that is on for your organisation.
No. Departments is for HR admins and org admins.