Users and roles
The two sign-in roles, how managers follow from the org chart, who sees and does what, how HR creates logins, and what happens to access when someone leaves.
There are two sign-in roles: HR admin and employee. A manager is an employee with direct reports. Nobody assigns the manager role: it follows the org chart, so moving a team never needs a role change.
| Who | Sees | Does |
|---|---|---|
| Employee | Their own record, balances and leave, the holidays and policies that apply to them | Books and cancels their own leave, updates their contact details |
| Manager | Their direct reports’ ordinary fields and leave, and who in their team is off | Approves or denies their team’s requests |
| HR admin | Everyone, including pay and sensitive fields | Manages records, policies, schedules, reports, pay transparency and settings |
The same checks apply in the app, in exports and to assistants.
Creating logins
Section titled “Creating logins”HR creates each login from the person’s record. Nobody can sign up on their own, and a Microsoft or Google sign-in only works for a login HR has already created, matched by work email. See sign-in.
When someone leaves
Section titled “When someone leaves”A person’s login stops working at the end of their last day, and any assistant keys or connections they made stop with it.
Changing who can sign in
Section titled “Changing who can sign in”Granting or removing HR admin, and turning a login on or off, are done by HR in the app. Each change is written to the audit log. Assistants can’t change access.