How do I manage roles and permissions?

What are the roles?

There are four roles, each giving more access than the last.

• Employee — sees only their own profile, leave, and payslips. No access to anyone else's data.
• Manager — everything an employee has, plus their direct reports: approving leave, giving feedback, and reviews for their team.
• HR Admin — org-wide access to configure the company, manage people, handle leave, and manage documents. Cannot touch billing.
• Super Admin — everything, including billing, the plan, and the most sensitive settings.

Think of it as a ladder: each role includes what the one below it can do, and adds more.

How do I change someone's role?

1. Open Admin → Team members

   Go to the Team members page to see everyone and their current role.

2. Find the person

   Locate the person whose access you want to change.

3. Pick a new role

   Choose the role that fits what they should be able to do.

4. Save the change

   Save, and their access updates the next time they load a page.

How do I choose the right role?

Give the smallest role that lets the person do their job. This keeps sensitive data safe.

New joiner with no team        → Employee
Team lead who approves leave    → Manager
HR person running the org       → HR Admin
Owner who also handles billing  → Super Admin

When in doubt, start lower. You can always raise a role later.

What does the role actually control?

The role controls which pages and buttons a person sees. Someone without access to a page will not see it in their menu at all.

For example, an Employee never sees the billing page. A Manager sees the approvals for their team but not for other teams. This keeps everyone focused on what they are meant to handle.