Roles and permissions

Who does what: each role with the screens they live in, the records they may change, and the separations payroll requires.

Payroll data is salary, bank account and national ID, and the roles are drawn to keep it in as few hands as the job allows. Permissions follow the job. A Line Manager’s view of the team stops at hours and leave. Salary is visible to HR Managers, Payroll Officers and the Finance Controller. The run is prepared by one role and approved by another. Configure and verify the same restrictions for each service identity before enabling agent writes.

Permissions

Summarised from the authored role permissions. Scope restrictions such as “own records” still apply; these symbols do not indicate completeness or runtime access.

Table	HR Manager	Recruiter	Line Manager	Payroll Officer	Finance Controller	Employee
master
`Departments`	Manage / maintain: Manage Employees, EmployeeAssignments, EmployeeDocuments, Positions, Departments, Locations, Holidays, WorkPatterns, CompensationRecords, CompensationLines, LeavePolicies, LeaveBalances, BenefitPlans, BenefitEnrolments, Policies, PolicyAcknowledgements, OnboardingTasks, Exits	View: View Positions, Departments, Employees (directory fields)	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated
`CostCentres`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	Manage / maintain: Manage PayrollJournals, PayrollJournalLines, GLAccounts, CostCentres, TaxYears	No table-specific permission stated
`Locations`	Manage / maintain: Manage Employees, EmployeeAssignments, EmployeeDocuments, Positions, Departments, Locations, Holidays, WorkPatterns, CompensationRecords, CompensationLines, LeavePolicies, LeaveBalances, BenefitPlans, BenefitEnrolments, Policies, PolicyAcknowledgements, OnboardingTasks, Exits	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated
`Holidays`	Manage / maintain: Manage Employees, EmployeeAssignments, EmployeeDocuments, Positions, Departments, Locations, Holidays, WorkPatterns, CompensationRecords, CompensationLines, LeavePolicies, LeaveBalances, BenefitPlans, BenefitEnrolments, Policies, PolicyAcknowledgements, OnboardingTasks, Exits	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated
`WorkPatterns`	Manage / maintain: Manage Employees, EmployeeAssignments, EmployeeDocuments, Positions, Departments, Locations, Holidays, WorkPatterns, CompensationRecords, CompensationLines, LeavePolicies, LeaveBalances, BenefitPlans, BenefitEnrolments, Policies, PolicyAcknowledgements, OnboardingTasks, Exits	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated
`Positions`	Manage / maintain: Manage Employees, EmployeeAssignments, EmployeeDocuments, Positions, Departments, Locations, Holidays, WorkPatterns, CompensationRecords, CompensationLines, LeavePolicies, LeaveBalances, BenefitPlans, BenefitEnrolments, Policies, PolicyAcknowledgements, OnboardingTasks, Exits	View: View Positions, Departments, Employees (directory fields)	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated
`Employees`	Manage / maintain: Manage Employees, EmployeeAssignments, EmployeeDocuments, Positions, Departments, Locations, Holidays, WorkPatterns, CompensationRecords, CompensationLines, LeavePolicies, LeaveBalances, BenefitPlans, BenefitEnrolments, Policies, PolicyAcknowledgements, OnboardingTasks, Exits	View: View Positions, Departments, Employees (directory fields)	View: View own team's Employees, LeaveBalances, AttendanceRecords, Timesheets, TimesheetLines	Specific actions: Edit Employees (TaxIdentifier, SocialInsuranceNumber, PaymentMethod, PayCalendar); Approve BankAccountChangeRequests prepared by another person and apply their account fields to Employees; View Employees, EmployeeAssignments, EmployeeDocuments, CompensationRecords, LeaveBalances, LeaveRequests, AttendanceRecords, Timesheets, TimesheetLines, BenefitEnrolments, BenefitPlans, Exits, TaxYears	View: View PayRuns, Payslips, PayslipLines, PaymentBatches, Payments, PayrollInputs, StatutoryFilings, Employees (cost fields)	View: View own Employees record, Payslips, PayslipLines, LeaveBalances, BenefitEnrolments, ShiftRosters, AttendanceRecords, Policies
`PayComponents`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	Manage / maintain: Manage PayRuns, PayPeriods, PayrollInputs, Payslips, PayslipLines, Garnishments, LoansAndAdvances, PaymentBatches, Payments, PayComponents, PayCalendars, Shifts, StatutoryRules, StatutoryRuleBands, StatutoryFilings, EmployeeTaxDetails, CompensationLines, BankAccountChangeRequests	No table-specific permission stated	No table-specific permission stated
`PayCalendars`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	Manage / maintain: Manage PayRuns, PayPeriods, PayrollInputs, Payslips, PayslipLines, Garnishments, LoansAndAdvances, PaymentBatches, Payments, PayComponents, PayCalendars, Shifts, StatutoryRules, StatutoryRuleBands, StatutoryFilings, EmployeeTaxDetails, CompensationLines, BankAccountChangeRequests	No table-specific permission stated	No table-specific permission stated
`TaxYears`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	View: View Employees, EmployeeAssignments, EmployeeDocuments, CompensationRecords, LeaveBalances, LeaveRequests, AttendanceRecords, Timesheets, TimesheetLines, BenefitEnrolments, BenefitPlans, Exits, TaxYears	Manage / maintain: Manage PayrollJournals, PayrollJournalLines, GLAccounts, CostCentres, TaxYears	No table-specific permission stated
`StatutoryRules`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	Manage / maintain: Manage PayRuns, PayPeriods, PayrollInputs, Payslips, PayslipLines, Garnishments, LoansAndAdvances, PaymentBatches, Payments, PayComponents, PayCalendars, Shifts, StatutoryRules, StatutoryRuleBands, StatutoryFilings, EmployeeTaxDetails, CompensationLines, BankAccountChangeRequests	No table-specific permission stated	No table-specific permission stated
`Shifts`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	Manage / maintain: Manage PayRuns, PayPeriods, PayrollInputs, Payslips, PayslipLines, Garnishments, LoansAndAdvances, PaymentBatches, Payments, PayComponents, PayCalendars, Shifts, StatutoryRules, StatutoryRuleBands, StatutoryFilings, EmployeeTaxDetails, CompensationLines, BankAccountChangeRequests	No table-specific permission stated	No table-specific permission stated
`LeavePolicies`	Manage / maintain: Manage Employees, EmployeeAssignments, EmployeeDocuments, Positions, Departments, Locations, Holidays, WorkPatterns, CompensationRecords, CompensationLines, LeavePolicies, LeaveBalances, BenefitPlans, BenefitEnrolments, Policies, PolicyAcknowledgements, OnboardingTasks, Exits	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated
`BenefitPlans`	Manage / maintain: Manage Employees, EmployeeAssignments, EmployeeDocuments, Positions, Departments, Locations, Holidays, WorkPatterns, CompensationRecords, CompensationLines, LeavePolicies, LeaveBalances, BenefitPlans, BenefitEnrolments, Policies, PolicyAcknowledgements, OnboardingTasks, Exits	No table-specific permission stated	No table-specific permission stated	View: View Employees, EmployeeAssignments, EmployeeDocuments, CompensationRecords, LeaveBalances, LeaveRequests, AttendanceRecords, Timesheets, TimesheetLines, BenefitEnrolments, BenefitPlans, Exits, TaxYears	No table-specific permission stated	No table-specific permission stated
`Policies`	Manage / maintain: Manage Employees, EmployeeAssignments, EmployeeDocuments, Positions, Departments, Locations, Holidays, WorkPatterns, CompensationRecords, CompensationLines, LeavePolicies, LeaveBalances, BenefitPlans, BenefitEnrolments, Policies, PolicyAcknowledgements, OnboardingTasks, Exits	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	View: View own Employees record, Payslips, PayslipLines, LeaveBalances, BenefitEnrolments, ShiftRosters, AttendanceRecords, Policies
`Dependants`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	Manage / maintain: Manage own LeaveRequests, Timesheets, TimesheetLines, Dependants and draft BankAccountChangeRequests
transaction
`EmployeeAssignments`	Manage / maintain: Manage Employees, EmployeeAssignments, EmployeeDocuments, Positions, Departments, Locations, Holidays, WorkPatterns, CompensationRecords, CompensationLines, LeavePolicies, LeaveBalances, BenefitPlans, BenefitEnrolments, Policies, PolicyAcknowledgements, OnboardingTasks, Exits; Approve JobOpenings, Offers, CompensationRecords, EmployeeAssignments, BenefitEnrolments	No table-specific permission stated	No table-specific permission stated	View: View Employees, EmployeeAssignments, EmployeeDocuments, CompensationRecords, LeaveBalances, LeaveRequests, AttendanceRecords, Timesheets, TimesheetLines, BenefitEnrolments, BenefitPlans, Exits, TaxYears	No table-specific permission stated	No table-specific permission stated
`EmployeeDocuments`	Manage / maintain: Manage Employees, EmployeeAssignments, EmployeeDocuments, Positions, Departments, Locations, Holidays, WorkPatterns, CompensationRecords, CompensationLines, LeavePolicies, LeaveBalances, BenefitPlans, BenefitEnrolments, Policies, PolicyAcknowledgements, OnboardingTasks, Exits	No table-specific permission stated	No table-specific permission stated	View: View Employees, EmployeeAssignments, EmployeeDocuments, CompensationRecords, LeaveBalances, LeaveRequests, AttendanceRecords, Timesheets, TimesheetLines, BenefitEnrolments, BenefitPlans, Exits, TaxYears	No table-specific permission stated	Specific actions: Upload own EmployeeDocuments
`EmployeeTaxDetails`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	Manage / maintain: Manage PayRuns, PayPeriods, PayrollInputs, Payslips, PayslipLines, Garnishments, LoansAndAdvances, PaymentBatches, Payments, PayComponents, PayCalendars, Shifts, StatutoryRules, StatutoryRuleBands, StatutoryFilings, EmployeeTaxDetails, CompensationLines, BankAccountChangeRequests	No table-specific permission stated	Specific actions: Submit own EmployeeTaxDetails
`PayPeriods`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	Manage / maintain: Manage PayRuns, PayPeriods, PayrollInputs, Payslips, PayslipLines, Garnishments, LoansAndAdvances, PaymentBatches, Payments, PayComponents, PayCalendars, Shifts, StatutoryRules, StatutoryRuleBands, StatutoryFilings, EmployeeTaxDetails, CompensationLines, BankAccountChangeRequests	No table-specific permission stated	No table-specific permission stated
`JobOpenings`	Specific actions: Approve JobOpenings, Offers, CompensationRecords, EmployeeAssignments, BenefitEnrolments	Manage / maintain: Manage JobOpenings, Candidates, Interviews, Offers; Submit JobOpenings and Offers for approval	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated
`Candidates`	No table-specific permission stated	Manage / maintain: Manage JobOpenings, Candidates, Interviews, Offers	Specific actions: View Candidates and Manage Interviews where Interviewer = self; Record Candidates hiring decisions after HiringManager interview feedback	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated
`Interviews`	No table-specific permission stated	Manage / maintain: Manage JobOpenings, Candidates, Interviews, Offers	View: View Candidates and Manage Interviews where Interviewer = self	No table-specific permission stated	No table-specific permission stated	Manage / maintain: Manage own Interviews as interviewer
`Offers`	Specific actions: Approve JobOpenings, Offers, CompensationRecords, EmployeeAssignments, BenefitEnrolments	Manage / maintain: Manage JobOpenings, Candidates, Interviews, Offers; Submit JobOpenings and Offers for approval	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated
`OnboardingTasks`	Manage / maintain: Manage Employees, EmployeeAssignments, EmployeeDocuments, Positions, Departments, Locations, Holidays, WorkPatterns, CompensationRecords, CompensationLines, LeavePolicies, LeaveBalances, BenefitPlans, BenefitEnrolments, Policies, PolicyAcknowledgements, OnboardingTasks, Exits	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated
`CompensationRecords`	Manage / maintain: Manage Employees, EmployeeAssignments, EmployeeDocuments, Positions, Departments, Locations, Holidays, WorkPatterns, CompensationRecords, CompensationLines, LeavePolicies, LeaveBalances, BenefitPlans, BenefitEnrolments, Policies, PolicyAcknowledgements, OnboardingTasks, Exits; Approve JobOpenings, Offers, CompensationRecords, EmployeeAssignments, BenefitEnrolments	No table-specific permission stated	No table-specific permission stated	Specific actions: Edit draft CompensationRecords (PayBasis, AnnualGross, HourlyRate, DailyRate, Currency, EffectiveFrom, EffectiveTo, RevisionReason); Submit CompensationRecords for approval; View Employees, EmployeeAssignments, EmployeeDocuments, CompensationRecords, LeaveBalances, LeaveRequests, AttendanceRecords, Timesheets, TimesheetLines, BenefitEnrolments, BenefitPlans, Exits, TaxYears	No table-specific permission stated	No table-specific permission stated
`LeaveBalances`	Manage / maintain: Manage Employees, EmployeeAssignments, EmployeeDocuments, Positions, Departments, Locations, Holidays, WorkPatterns, CompensationRecords, CompensationLines, LeavePolicies, LeaveBalances, BenefitPlans, BenefitEnrolments, Policies, PolicyAcknowledgements, OnboardingTasks, Exits	No table-specific permission stated	View: View own team's Employees, LeaveBalances, AttendanceRecords, Timesheets, TimesheetLines	View: View Employees, EmployeeAssignments, EmployeeDocuments, CompensationRecords, LeaveBalances, LeaveRequests, AttendanceRecords, Timesheets, TimesheetLines, BenefitEnrolments, BenefitPlans, Exits, TaxYears	No table-specific permission stated	View: View own Employees record, Payslips, PayslipLines, LeaveBalances, BenefitEnrolments, ShiftRosters, AttendanceRecords, Policies
`LeaveRequests`	Specific actions: Approve LeaveRequests assigned through the entity's escalation rule	No table-specific permission stated	Specific actions: Approve LeaveRequests and Timesheets for direct reports	View: View Employees, EmployeeAssignments, EmployeeDocuments, CompensationRecords, LeaveBalances, LeaveRequests, AttendanceRecords, Timesheets, TimesheetLines, BenefitEnrolments, BenefitPlans, Exits, TaxYears	No table-specific permission stated	Manage / maintain: Manage own LeaveRequests, Timesheets, TimesheetLines, Dependants and draft BankAccountChangeRequests
`ShiftRosters`	No table-specific permission stated	No table-specific permission stated	Manage / maintain: Manage ShiftRosters for own team	No table-specific permission stated	No table-specific permission stated	View: View own Employees record, Payslips, PayslipLines, LeaveBalances, BenefitEnrolments, ShiftRosters, AttendanceRecords, Policies
`AttendanceRecords`	No table-specific permission stated	No table-specific permission stated	View: View own team's Employees, LeaveBalances, AttendanceRecords, Timesheets, TimesheetLines	View: View Employees, EmployeeAssignments, EmployeeDocuments, CompensationRecords, LeaveBalances, LeaveRequests, AttendanceRecords, Timesheets, TimesheetLines, BenefitEnrolments, BenefitPlans, Exits, TaxYears	No table-specific permission stated	View: View own Employees record, Payslips, PayslipLines, LeaveBalances, BenefitEnrolments, ShiftRosters, AttendanceRecords, Policies
`Timesheets`	No table-specific permission stated	No table-specific permission stated	Specific actions: View own team's Employees, LeaveBalances, AttendanceRecords, Timesheets, TimesheetLines; Approve LeaveRequests and Timesheets for direct reports	View: View Employees, EmployeeAssignments, EmployeeDocuments, CompensationRecords, LeaveBalances, LeaveRequests, AttendanceRecords, Timesheets, TimesheetLines, BenefitEnrolments, BenefitPlans, Exits, TaxYears	No table-specific permission stated	Manage / maintain: Manage own LeaveRequests, Timesheets, TimesheetLines, Dependants and draft BankAccountChangeRequests
`PayrollInputs`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	Manage / maintain: Manage PayRuns, PayPeriods, PayrollInputs, Payslips, PayslipLines, Garnishments, LoansAndAdvances, PaymentBatches, Payments, PayComponents, PayCalendars, Shifts, StatutoryRules, StatutoryRuleBands, StatutoryFilings, EmployeeTaxDetails, CompensationLines, BankAccountChangeRequests	View: View PayRuns, Payslips, PayslipLines, PaymentBatches, Payments, PayrollInputs, StatutoryFilings, Employees (cost fields)	No table-specific permission stated
`PayRuns`	View: View PayRuns, Payslips, BankAccountChangeRequests	No table-specific permission stated	No table-specific permission stated	Manage / maintain: Manage PayRuns, PayPeriods, PayrollInputs, Payslips, PayslipLines, Garnishments, LoansAndAdvances, PaymentBatches, Payments, PayComponents, PayCalendars, Shifts, StatutoryRules, StatutoryRuleBands, StatutoryFilings, EmployeeTaxDetails, CompensationLines, BankAccountChangeRequests; Submit PayRuns for approval	Specific actions: Approve PayRuns and return submitted runs for correction; View PayRuns, Payslips, PayslipLines, PaymentBatches, Payments, PayrollInputs, StatutoryFilings, Employees (cost fields)	No table-specific permission stated
`Payslips`	View: View PayRuns, Payslips, BankAccountChangeRequests	No table-specific permission stated	No table-specific permission stated	Manage / maintain: Manage PayRuns, PayPeriods, PayrollInputs, Payslips, PayslipLines, Garnishments, LoansAndAdvances, PaymentBatches, Payments, PayComponents, PayCalendars, Shifts, StatutoryRules, StatutoryRuleBands, StatutoryFilings, EmployeeTaxDetails, CompensationLines, BankAccountChangeRequests	View: View PayRuns, Payslips, PayslipLines, PaymentBatches, Payments, PayrollInputs, StatutoryFilings, Employees (cost fields)	View: View own Employees record, Payslips, PayslipLines, LeaveBalances, BenefitEnrolments, ShiftRosters, AttendanceRecords, Policies
`Garnishments`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	Manage / maintain: Manage PayRuns, PayPeriods, PayrollInputs, Payslips, PayslipLines, Garnishments, LoansAndAdvances, PaymentBatches, Payments, PayComponents, PayCalendars, Shifts, StatutoryRules, StatutoryRuleBands, StatutoryFilings, EmployeeTaxDetails, CompensationLines, BankAccountChangeRequests	No table-specific permission stated	No table-specific permission stated
`LoansAndAdvances`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	Manage / maintain: Manage PayRuns, PayPeriods, PayrollInputs, Payslips, PayslipLines, Garnishments, LoansAndAdvances, PaymentBatches, Payments, PayComponents, PayCalendars, Shifts, StatutoryRules, StatutoryRuleBands, StatutoryFilings, EmployeeTaxDetails, CompensationLines, BankAccountChangeRequests	No table-specific permission stated	No table-specific permission stated
`BenefitEnrolments`	Manage / maintain: Manage Employees, EmployeeAssignments, EmployeeDocuments, Positions, Departments, Locations, Holidays, WorkPatterns, CompensationRecords, CompensationLines, LeavePolicies, LeaveBalances, BenefitPlans, BenefitEnrolments, Policies, PolicyAcknowledgements, OnboardingTasks, Exits; Approve JobOpenings, Offers, CompensationRecords, EmployeeAssignments, BenefitEnrolments	No table-specific permission stated	No table-specific permission stated	View: View Employees, EmployeeAssignments, EmployeeDocuments, CompensationRecords, LeaveBalances, LeaveRequests, AttendanceRecords, Timesheets, TimesheetLines, BenefitEnrolments, BenefitPlans, Exits, TaxYears	No table-specific permission stated	View: View own Employees record, Payslips, PayslipLines, LeaveBalances, BenefitEnrolments, ShiftRosters, AttendanceRecords, Policies
`StatutoryFilings`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	Manage / maintain: Manage PayRuns, PayPeriods, PayrollInputs, Payslips, PayslipLines, Garnishments, LoansAndAdvances, PaymentBatches, Payments, PayComponents, PayCalendars, Shifts, StatutoryRules, StatutoryRuleBands, StatutoryFilings, EmployeeTaxDetails, CompensationLines, BankAccountChangeRequests	Specific actions: Approve StatutoryFilings year-end statements and authorise statutory payments; View PayRuns, Payslips, PayslipLines, PaymentBatches, Payments, PayrollInputs, StatutoryFilings, Employees (cost fields)	View: View own published StatutoryFilings employee tax certificates
`PolicyAcknowledgements`	Manage / maintain: Manage Employees, EmployeeAssignments, EmployeeDocuments, Positions, Departments, Locations, Holidays, WorkPatterns, CompensationRecords, CompensationLines, LeavePolicies, LeaveBalances, BenefitPlans, BenefitEnrolments, Policies, PolicyAcknowledgements, OnboardingTasks, Exits	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated
`Exits`	Manage / maintain: Manage Employees, EmployeeAssignments, EmployeeDocuments, Positions, Departments, Locations, Holidays, WorkPatterns, CompensationRecords, CompensationLines, LeavePolicies, LeaveBalances, BenefitPlans, BenefitEnrolments, Policies, PolicyAcknowledgements, OnboardingTasks, Exits	No table-specific permission stated	No table-specific permission stated	View: View Employees, EmployeeAssignments, EmployeeDocuments, CompensationRecords, LeaveBalances, LeaveRequests, AttendanceRecords, Timesheets, TimesheetLines, BenefitEnrolments, BenefitPlans, Exits, TaxYears	No table-specific permission stated	Specific actions: Initiate own Exits resignation and view its progress
line item
`StatutoryRuleBands`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	Manage / maintain: Manage PayRuns, PayPeriods, PayrollInputs, Payslips, PayslipLines, Garnishments, LoansAndAdvances, PaymentBatches, Payments, PayComponents, PayCalendars, Shifts, StatutoryRules, StatutoryRuleBands, StatutoryFilings, EmployeeTaxDetails, CompensationLines, BankAccountChangeRequests	No table-specific permission stated	No table-specific permission stated
`CompensationLines`	Manage / maintain: Manage Employees, EmployeeAssignments, EmployeeDocuments, Positions, Departments, Locations, Holidays, WorkPatterns, CompensationRecords, CompensationLines, LeavePolicies, LeaveBalances, BenefitPlans, BenefitEnrolments, Policies, PolicyAcknowledgements, OnboardingTasks, Exits	No table-specific permission stated	No table-specific permission stated	Manage / maintain: Manage PayRuns, PayPeriods, PayrollInputs, Payslips, PayslipLines, Garnishments, LoansAndAdvances, PaymentBatches, Payments, PayComponents, PayCalendars, Shifts, StatutoryRules, StatutoryRuleBands, StatutoryFilings, EmployeeTaxDetails, CompensationLines, BankAccountChangeRequests	No table-specific permission stated	No table-specific permission stated
`TimesheetLines`	No table-specific permission stated	No table-specific permission stated	View: View own team's Employees, LeaveBalances, AttendanceRecords, Timesheets, TimesheetLines	View: View Employees, EmployeeAssignments, EmployeeDocuments, CompensationRecords, LeaveBalances, LeaveRequests, AttendanceRecords, Timesheets, TimesheetLines, BenefitEnrolments, BenefitPlans, Exits, TaxYears	No table-specific permission stated	Manage / maintain: Manage own LeaveRequests, Timesheets, TimesheetLines, Dependants and draft BankAccountChangeRequests
`PayslipLines`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	Manage / maintain: Manage PayRuns, PayPeriods, PayrollInputs, Payslips, PayslipLines, Garnishments, LoansAndAdvances, PaymentBatches, Payments, PayComponents, PayCalendars, Shifts, StatutoryRules, StatutoryRuleBands, StatutoryFilings, EmployeeTaxDetails, CompensationLines, BankAccountChangeRequests	View: View PayRuns, Payslips, PayslipLines, PaymentBatches, Payments, PayrollInputs, StatutoryFilings, Employees (cost fields)	View: View own Employees record, Payslips, PayslipLines, LeaveBalances, BenefitEnrolments, ShiftRosters, AttendanceRecords, Policies
finance
`BankAccountChangeRequests`	View: View PayRuns, Payslips, BankAccountChangeRequests	No table-specific permission stated	No table-specific permission stated	Manage / maintain: Manage PayRuns, PayPeriods, PayrollInputs, Payslips, PayslipLines, Garnishments, LoansAndAdvances, PaymentBatches, Payments, PayComponents, PayCalendars, Shifts, StatutoryRules, StatutoryRuleBands, StatutoryFilings, EmployeeTaxDetails, CompensationLines, BankAccountChangeRequests; Approve BankAccountChangeRequests prepared by another person and apply their account fields to Employees	No table-specific permission stated	Manage / maintain: Manage own LeaveRequests, Timesheets, TimesheetLines, Dependants and draft BankAccountChangeRequests; Submit own BankAccountChangeRequests
`GLAccounts`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	Manage / maintain: Manage PayrollJournals, PayrollJournalLines, GLAccounts, CostCentres, TaxYears	No table-specific permission stated
`PaymentBatches`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	Manage / maintain: Manage PayRuns, PayPeriods, PayrollInputs, Payslips, PayslipLines, Garnishments, LoansAndAdvances, PaymentBatches, Payments, PayComponents, PayCalendars, Shifts, StatutoryRules, StatutoryRuleBands, StatutoryFilings, EmployeeTaxDetails, CompensationLines, BankAccountChangeRequests	View: View PayRuns, Payslips, PayslipLines, PaymentBatches, Payments, PayrollInputs, StatutoryFilings, Employees (cost fields)	No table-specific permission stated
`Payments`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	Manage / maintain: Manage PayRuns, PayPeriods, PayrollInputs, Payslips, PayslipLines, Garnishments, LoansAndAdvances, PaymentBatches, Payments, PayComponents, PayCalendars, Shifts, StatutoryRules, StatutoryRuleBands, StatutoryFilings, EmployeeTaxDetails, CompensationLines, BankAccountChangeRequests	View: View PayRuns, Payslips, PayslipLines, PaymentBatches, Payments, PayrollInputs, StatutoryFilings, Employees (cost fields)	No table-specific permission stated
`PayrollJournals`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	Specific actions: Draft PayrollJournals and PayrollJournalLines without posting	Manage / maintain: Manage PayrollJournals, PayrollJournalLines, GLAccounts, CostCentres, TaxYears; Post PayrollJournals	No table-specific permission stated
`PayrollJournalLines`	No table-specific permission stated	No table-specific permission stated	No table-specific permission stated	Specific actions: Draft PayrollJournals and PayrollJournalLines without posting	Manage / maintain: Manage PayrollJournals, PayrollJournalLines, GLAccounts, CostCentres, TaxYears	No table-specific permission stated

HR ManagerAccess headcount, leave, recruiting and benefits reports
RecruiterAccess recruiting reports

Manage / maintain View Specific actions— No table-specific permission statedPermissions also apply to agents

How permissions work

6 rules

Records

View, create, edit, delete per table, with row filters where needed. An employee sees their own payslips, a Line Manager their direct reports' attendance, a Payroll Officer the entities they are scoped to.

Fields

National ID and bank account are masked for every role except HR Manager and Payroll Officer. Salary fields are hidden from Line Managers and Recruiters, and the Employee Directory shows employees no salary or identifier columns. On the employee record the HR Manager owns the identity, organisation and employment fields. The Payroll Officer edits statutory identifiers, payment method and pay calendar, completes draft salary headers and lines, then submits them for HR Manager approval. Bank fields change only through approval of a BankAccountChangeRequests record and its matching proof.

Actions

Approve an offer, approve a leave request, submit a run, approve a run, authorise a batch, post a journal, lift a hold, lock a period or a tax year. Actions are separate from record rights, so a controller can read a run they may not edit.

Segregation

The system refuses the same user as preparer and approver of a run, as either the run preparer or approver and bank authoriser of a batch, or as requester and approver of leave or a bank-account change. These conflicts still apply to an administrator assigned a business role.

Delegation

Overdue leave is reassigned to the entity's designated HR Manager. OriginalApprover and EscalatedOn preserve the handoff, and the current assignee sees it in Leave Approvals. Other delegation arrangements must be scoped and tested during configuration.

Self-service

Employees change their own contact details, upload documents and submit their tax details for the year. A bank-account request carries the proposed account and exact proof. A Payroll Officer other than the requester verifies the match before it becomes current. Employees can initiate their own resignation and read their published tax certificates; those actions stay restricted to their own records.

The roles

HR Manager

Owns the employee master, assignments, positions, policies, offers and exits, and decides leave exceptions and compensation revisions.

Permissions and screens

Manage Employees, EmployeeAssignments, EmployeeDocuments, Positions, Departments, Locations, Holidays, WorkPatterns, CompensationRecords, CompensationLines, LeavePolicies, LeaveBalances, BenefitPlans, BenefitEnrolments, Policies, PolicyAcknowledgements, OnboardingTasks, Exits
Approve JobOpenings, Offers, CompensationRecords, EmployeeAssignments, BenefitEnrolments
Approve LeaveRequests assigned through the entity's escalation rule
Authorise Exits terminal amounts and confirm clearance
View PayRuns, Payslips, BankAccountChangeRequests
Access headcount, leave, recruiting and benefits reports

Shift RosterPlanned

EmployeeRoster DateShiftLocation

Requisition ApprovalsPendingApproval

Requisition NumberPositionDepartmentHiring Manager

Offer ApprovalsPendingApproval

Offer NumberCandidatePositionLegal Entity

Recruiter

Runs openings from requisition to accepted offer.

Permissions and screens

Manage JobOpenings, Candidates, Interviews, Offers
View Positions, Departments, Employees (directory fields)
Submit JobOpenings and Offers for approval
Access recruiting reports

Employee DirectoryOnboarding

Employee NumberFull NameDepartmentPosition

Candidate PipelineApplied

Candidate NumberFull NameJob OpeningSource

Job Board

Employee DirectoryEmployees

StatusOnboardingActiveOnLeaveSuspendedOnNotice

Onboarding

EMP-87314DPR-110

EMP-21739DPR-140

Active

EMP-28522DPR-120

OnLeave

EMP-99195DPR-110

Suspended

EMP-61919DPR-110

OnNotice

EMP-74611DPR-150

Line Manager

Approves leave, attendance corrections and timesheets for direct reports, keeps the team roster, and interviews for openings.

Permissions and screens

View own team's Employees, LeaveBalances, AttendanceRecords, Timesheets, TimesheetLines
Manage ShiftRosters for own team
Approve LeaveRequests and Timesheets for direct reports
Regularise AttendanceRecords for direct reports
Raise JobOpenings
View Candidates and Manage Interviews where Interviewer = self
Record Candidates hiring decisions after HiringManager interview feedback
Complete own OnboardingTasks

Shift RosterPlanned

EmployeeRoster DateShiftLocation

My Team Today

EmployeeAttendance DateShiftClock In

Leave ApprovalsSubmitted

Request NumberEmployeeLeave PolicyFrom Date

Payroll Officer

Prepares the pay run: employee pay setup, inputs, calculation, review, payslips, bank file and statutory returns.

Permissions and screens

Manage PayRuns, PayPeriods, PayrollInputs, Payslips, PayslipLines, Garnishments, LoansAndAdvances, PaymentBatches, Payments, PayComponents, PayCalendars, Shifts, StatutoryRules, StatutoryRuleBands, StatutoryFilings, EmployeeTaxDetails, CompensationLines, BankAccountChangeRequests
Edit draft CompensationRecords (PayBasis, AnnualGross, HourlyRate, DailyRate, Currency, EffectiveFrom, EffectiveTo, RevisionReason)
Edit Employees (TaxIdentifier, SocialInsuranceNumber, PaymentMethod, PayCalendar)
Approve BankAccountChangeRequests prepared by another person and apply their account fields to Employees
Submit CompensationRecords for approval
View Employees, EmployeeAssignments, EmployeeDocuments, CompensationRecords, LeaveBalances, LeaveRequests, AttendanceRecords, Timesheets, TimesheetLines, BenefitEnrolments, BenefitPlans, Exits, TaxYears
Submit PayRuns for approval
Draft PayrollJournals and PayrollJournalLines without posting

Pending Payroll InputsPending

Input NumberPay RunEmployeeComponent

Onboarding ChecklistPending

Task NumberEmployeeTask NameOwner Role

Payroll

Statutory Filing CalendarPending

Filing NumberLegal EntityFiling TypePeriod End

Social Insurance Return

Pending Payroll InputsPayrollInputs

Pending

PI-33469 PR-50892 30 8 d
PI-80123 PR-77467 40 in 1 d
PI-28235 PR-91892 100 2 d
PI-63581 PR-21679 620 in 5 d
PI-23409 PR-58989 630 in 6 d

PI-33469

PayRun: PR-50892
Employee: HN
Component: PC-5695
Amount: 300
Quantity: 30

Approval waits for the payroll officer.

Finance Controller

Approves the pay run, authorises the bank file, owns the payroll journal and its reconciliation to the ledger, and locks periods and tax years.

Permissions and screens

Approve PayRuns and return submitted runs for correction
Authorise PaymentBatches only when not the run preparer or approver
Approve StatutoryFilings year-end statements and authorise statutory payments
Manage PayrollJournals, PayrollJournalLines, GLAccounts, CostCentres, TaxYears
Post PayrollJournals
Close PayPeriods
Lock and reopen TaxYears with a recorded reason
View PayRuns, Payslips, PayslipLines, PaymentBatches, Payments, PayrollInputs, StatutoryFilings, Employees (cost fields)

Offer ApprovalsPendingApproval

Offer NumberCandidatePositionLegal Entity

Pay Run ApprovalsPendingApproval

Pay Run NumberLegal EntityRun TypePeriod End

Off Cycle

Journals to PostDraft

Journal NumberJournal TypePay RunLegal Entity

Accrual

Offer ApprovalsOffers

PendingApproval

OFF-44764 CND-83050 950 3 d
OFF-55341 CND-33625 310 in 5 d
OFF-16296 CND-10319 420 10 d
OFF-33202 CND-97263 580 3 d
OFF-15528 CND-85760 590 in 7 d

OFF-44764

Candidate: CND-83050
Position: PST-6967
LegalEntity: LE-92610
AnnualSalary: 950
SigningBonus: 90

Active waits for the hr manager.

Employee

Sees their own record, payslips and balances; raises leave and timesheets; keeps their documents, tax details and dependants current; records feedback on interviews they conduct.

Permissions and screens

View own Employees record, Payslips, PayslipLines, LeaveBalances, BenefitEnrolments, ShiftRosters, AttendanceRecords, Policies
Manage own LeaveRequests, Timesheets, TimesheetLines, Dependants and draft BankAccountChangeRequests
Submit own BankAccountChangeRequests
Initiate own Exits resignation and view its progress
View own published StatutoryFilings employee tax certificates
Submit own EmployeeTaxDetails
Upload own EmployeeDocuments
Manage own Interviews as interviewer