Available for the following HR plans: Standard, Premium, Platinum
Available for the following user access levels: Admin
Platform admins automatically have full access to all features on the Employment Hero platform. Other user types, such as employees and managers, have limited default access to the features they need for regular daily tasks. Admins can grant custom access to specific features by creating security groups, defining the scope of accessible data, and selecting the required permissions for assigned members.
Getting Started: Accessing Permissions
Before creating custom access levels, you must navigate to the centralized security settings.
- Click the Settings menu icon at the bottom of the left-hand navigation bar.
- Under the Security & Access Control column, click the Permissions submenu.
- Here, you can view your existing security groups or create new ones to customize user access.
Daily Activity
The platform uses a step-by-step wizard to guide you through the process of granting granular access.
- Click the purple + Create Security Group (or Add Permission) button.
-
Detail & Access:
- Group Name: Give the group a descriptive label (e.g., "Vancouver Store Managers").
- Description: Add an optional summary of why this group was created.
-
Whose data can this group access? This defines the target of the group's view:
- All Employees: Access to every file in the organization.
- Specific Teams/Locations/Worksites: Access limited to specific groups (Note: Advanced filtering may require Platinum).
- Direct Reports Only: Access limited to individuals who report directly to the member.
-
Define Permissions: Toggle the level of access for individual modules:
- View: Members can see data but cannot edit it.
- Modify: Members can edit details (e.g., updating an address).
- Delete: Members have the authority to remove records.
- Use: Members can use a feature without seeing underlying data.
- Review: Check the Permissions summary to verify settings.
- Select Members: Search for and select the individuals to be assigned to this group.
- Click Save.
To speed up the process, the platform provides standard templates for common organizational roles:
- HR Administrator: Pre-configured for standard HR functions and employee management.
- Payroll Administrator: Includes access to financial data, banking details, and Canada-specific tax settings.
- Recruitment Manager: Tailored for managing job postings and candidate pipelines.
Important Information for Canada
One-Way Data Flow and Privacy
In the integrated Canadian platform, HR is the source of truth. Admins should use Privacy Mode (the eye icon or toggle) when presenting their screens to ensure sensitive data like Social Insurance Numbers (SINs) or salary history remains hidden from view.
Cumulative Permissions: If an employee belongs to multiple security groups, their permissions are cumulative. This means they will have the highest level of access granted by any of the groups they are assigned to.
Questions
Permissions activate immediately for active users as soon as the group is saved. For new hires, permissions will switch on once they transition to "Active" status on their start date.
Yes. You can configure a security group to grant Modify access for "Direct Reports" while ensuring the user's personal access level remains restricted to "View only" for their own file.
Under the Time module in the permissions wizard, ensure you toggle Modify access for Timesheets Management. This allows managers to approve or decline hours for the employees in their defined scope.
Explore Content
- Grant feature access to employees through security groups: You can grant custom access to certain features through Security & Access Settings.
- Getting started: Onboarding your employees: This guide explains how to easily onboard your employees in Employment Hero, which documents you need to send to them, and how to onboard them