Grant any custom access needs with Permissions

1. Go to Settings, select Permissions, then click the + Add Permission button. The Create Security Group page has six steps: Group details, Employee Permissions, Contractor Permissions, Volunteer Permissions, General Permissions and Review.

To set up the group:

1. In Group details, enter a Group name that describes the group's purpose, such as Payroll Admins or HR Managers.
2. Optional: enter a Description.
3. Under Group members, choose who will be granted these permissions. Select All employees or All managers, or select individual employees and/or groups from the dropdown.
4. Select Next.

The All managers list updates automatically. A worker is added when they are assigned as a primary or secondary manager to any direct or indirect report, and is removed once all of those reporting relationships have ended.

Employee Permissions has two parts. Employee Access sets which employees the group can access, and the modules set what the group can do with their data.

1. Under Employee Access, select one of the following: All employees, Reporting Employees, Groups, Locations, Worksites or No employees.
2. Optional: under Exclusions, select Exclude specific employees, Exclude specific groups, Exclude specific locations or Exclude specific worksites. Exclusions take priority over the access scope. For example, if you select All employees and exclude a group called ELT, the security group can access all employees except those in ELT.
3. For each module, select View, Modify, Delete or Use, depending on what the group needs. Use Search modules to find a module quickly.
4. Select Next.

Modules include Documents, Custom Reports, employee file sections such as Banking Details, Tax Declaration Details and Pay Details, Payslips, Expense Management, Reports and Tasks for employees.

Note: When you select an exclusion, only some permissions are available. More permissions that support exclusions are coming soon.

Contractor Permissions and Volunteer Permissions follow the same pattern as employee permissions: first choose the scope of access, then select the modules the group can use.

1. On the Contractor Permissions step, under Contractor Access, select All contractors, Reporting contractors or No contractors.
2. Select the modules the group needs for contractor data, such as Tasks for contractors, Safety Module (Incident report) for contractors and Payroll Errors.
3. Select Next.
4. On the Volunteer Permissions step, under Volunteer Access, select All volunteers, Reporting volunteers or No volunteers.
5. Select the permissions the group needs for the Volunteer Profile module, then select Next.

General Permissions apply across your whole organisation. They aren't limited by employee or contractor scope.

1. Select the platform-wide permissions the group needs. These include Recruitment Settings and Recruitment, Trigger Onboarding Checklists, Re-activate Employees, Workforce Visibility, Asset Register, 360 Reviews, Performance Review Settings, Employee requisition management, Workflows and API access to the Developer Portal.
2. Select Next.

Note: Webhook access is only available on the Platinum plan.

The Review step shows a summary of the security group before you save it.

1. Check the group name and description, who the permissions are granted to, and whose data the group can access.
2. Check the permissions summary. Full permissions means all available actions are selected for a module. Partial permissions means only some actions are selected.
3. To change a section, select Edit beside it.
4. Select Save. The security group now appears on the Permissions page.