Available for the following plans: Lite, Plus, Unlimited HR, Essentials, Engage, Elite, Unlimited HR+Payroll
Available for the following HR plans: Standard, Premium, Platinum
Available for the following User Access level: Admin
Platform admins automatically have access to all the features on the Employment Hero platform. Other user types, like employees and managers, do not have the same access to everything. Their default access is limited to the features that they have to use regularly.
Admins can grant custom access to certain features through Permission Settings. To do that, you have to create a custom security group, define who has access to what data, select the specific permissions needed, and assign the appropriate people. This article shows you how to do that. To learn which features you can give permissions to, please refer to this article: Features that managers and employees can be given access to.
Premium vs Platinum plan features
Both plans let you create security groups and grant feature access. Platinum offers more control in two ways: it can scope a group's access to specific Teams, Locations and Worksites (Premium is limited to All employees or Reporting Employees), and it can expand a parent permission to toggle individual child permissions on or off (Premium applies permissions at the parent level only).
Daily activities
Create a security group
Creating a security group is guided through a step-by-step process that makes it easier to understand what access you're granting and to whom.
- Click the Settings menu.
- In the Security & Access Control section, click Permissions.
- Click the Add Permission button to create a new security group.
-
Detail & Access: Complete the following fields:
- Group name: Give your security group a descriptive name that clearly explains its purpose.
- Description: Add an optional description to provide more context about this group's purpose.
-
Whose data can this group access: Define the scope of employee and contractor data this security group can access:
- Employee Access: Choose from All employees, Reporting Employees, Groups, Locations, Worksites, or No employees.
- Click Next to continue.
-
Employee Permissions: Configure which actions this security group can perform on employee data.
- Additional Information: Additional Information can now be accessed via permissions. This is available under Employee File (Non-Payroll details). Access can be set to View or Modify.
Important Note for Managers
For Managers, the field-level access configured in Settings Additional Information takes priority and will override permissions set in Reporting Employees access.
- Contractor Permissions: Configure the permissions for contractor data if selected in Step 1.
-
General Permissions: Select any platform-wide permissions that don't relate to specific employee or contractor files, such as:
- Document Management: Granting Use access allows employees to access Document Management in Compliance, where they can add, update, delete, and share documents on personnel files.
- Leave calendar access: Granting Use access allows employees to view and manage leave requests via the company-wide leave calendar.
- Recruitment management: Granting Use access allows employees to access recruitment features, including managing job postings and candidate pipelines.
- API access: Granting Use access allows employees to generate and manage API keys for system integrations.
- Announcement posting: Granting Use access allows employees to create, edit, and publish company announcements to the dashboard.
- Click Next to continue.
-
Assignment: In this final step, you will assign the specific users who should belong to this security group.
Important Note on Contractor Access
These permissions can only be granted to Employees. Contractors cannot be granted these permissions or added to security groups.
- Search for and select the employees you wish to grant these features to.
- Click Save to finalise the security group and apply the permissions to the selected users.
Further information
Can I grant access to additional information tab?
Yes, Additional Information can now be accessed via permissions.
Can employees be given access to delete or remove other employee profiles?
Further information
What is the difference between Premium and Platinum permissions?
There are two main differences. First, data scope: Premium can scope a security group to All employees or Reporting Employees, while Platinum can additionally scope to Teams, Locations and Worksites. Second, granularity: Premium applies permissions at the parent level only, while Platinum lets you toggle individual child permissions within a parent. See the Premium vs Platinum note at the top of this article, and the plan-specific callouts within the steps above.
Can I grant access to additional information tab?
Yes, Additional Information can now be accessed via permissions.