Roles and permissions
Understand the built-in workspace roles and add custom roles where needed.
Every user has one core workspace role: Owner, Administrator, HR, Payroll, Manager, Employee or Auditor. Custom roles add to a user’s core role; they do not replace it.
- Employee: own records — profile, attendance, leave and assigned actions.
- Manager (supervisor): own records plus their team, with approvals and attendance exceptions.
- HR: people operations across the workspace; sensitive security settings stay controlled.
- Payroll: prepares and runs payroll with the workforce data it needs.
- Auditor: read-only review of records, reports and evidence.
- Administrator: workspace configuration, access control, integrations and billing.
- Go to Admin → Roles & permissions.
- Use the Effective access matrix to see what each role can do.
- To give someone an extra permission set, select Assign a role, choose the user and the role, and save.
- Check access history to see every role assignment and change.
A person’s core access (for example HR access or Payroll access) is set from their employee profile, under Administration → Access and roles.