Give each person the record access needed for their work.
Record entry and read access are separate; a person who sees a record may be unable to change it.
Salary, benefit, performance and payroll records deserve a role check before the first cycle.
A person referenced on an offer, leave request, timesheet or payroll run needs the access required to record the decision.
| Role | Organization and employees | Recruiting and offers | Onboarding and separation | Time and leave | Payroll and benefits | Performance and learning |
|---|---|---|---|---|---|---|
| Employee | — | — | — | Edit | View | Edit |
| L&D Admin | View | View | View | View | — | Edit |
| Hiring Manager | — | View | — | — | — | — |
| Recruiter | View | Edit | View | View | — | — |
| Payroll Admin | View | — | View | View | Edit | — |
| HR Business Partner | Edit | Edit | Edit | Edit | View | Edit |
| CHRO / VP People | View | View | View | View | View | View |
| Admin | Edit | Edit | Edit | Edit | Edit | Edit |
Self-service record entry on leave, timesheets and goals; read-only on pay, benefits and performance.
Starts on: Leave approval inbox
Record entry on the learning catalog and training records; read-only on employees and positions.
Starts on: Training expiring
Read-only visibility into requisitions and the hiring pipeline.
Starts on: Requisitions awaiting approval
Record entry across the hiring pipeline; read-only on employees.
Starts on: Requisitions awaiting approval
Record entry on payroll and tax tables; read-only on employees, benefits, leave and timesheets.
Starts on: Timesheets awaiting approval
Record entry on people and performance tables; read-only on pay and benefits.
Starts on: Reviews in progress
Read-only oversight across all 33 HRMS tables.
Starts on: Payroll approval queue
Superuser: full record CRUD on all 33 HRMS tables, plus every view, report and app setting.
Start free, then use Proto to change fields, steps and approvals before your team goes live.