Platform admins automatically have access to all the features on the Employment Hero platform. Other user types, like employees and managers, do not have the same access to everything. Their default access is limited to the features that they have to use regularly.
Admins can grant custom access to certain features through Permission Settings. To do that, you have to create a custom security group, define who has access to what data, select the specific permissions needed, and assign the appropriate people. This article shows you how to do that. To learn which features you can give permissions to, please refer to this article: Features that managers and employees can be given access to.
Give your employees' permissions
Creating a permissions group is guided through a step-by-step process that makes it easier to understand what access you are granting and to whom.
- Log in to Employment Hero.
- Click the Settings menu option on the left-hand side navigation.
- In the Security & Access Control section, click Permissions.
- Click the Add Permission button to create a new security group.
-
Detail & Access: Complete the following fields:
- Group name: Give your security group a descriptive name that clearly explains its purpose (e.g., "Payroll Admins" or "HR Managers").
- Description: Add an optional description to provide more context about this group's purpose.
-
Whose data can this group access: Define
the scope of employee and contractor data this security
group can access:
- Employee Access: Choose from All employees, Direct reports only, Teams, Locations, Worksites, or No employees
- Contractor Access: Choose from All contractors, Reporting contractors, or No contractors
Click Next to continue.
-
Employee Permissions: Configure which actions this security group can perform on employee data. Permissions are organised by modules to make them easier to find:
- Use the search bar to quickly find specific permissions (e.g., search "leave" to find all leave-related permissions)
- For each module, select the appropriate access level: View, Modify, Delete, or Use
- Hover over the information icons to understand what each permission allows
Click Create to continue.
- Contractor Permissions: If you selected contractor access in Step 1, configure the permissions for contractor data. Click Next to continue.
-
Step 4 - General Permissions: Select any platform-wide permissions that do not relate to specific employee or contractor files, such as:
- Leave calendar access
- Recruitment management
- API access
- Announcement posting
Click Next to continue.
-
Review: Review your security group setup before finalising:
- Check the group name and description
- Verify whose data this group can access
- Review the permissions summary, which shows both full and partial permissions
- Use the Edit buttons to return to previous steps if changes are needed
Click Next to continue.
- Select Members: Choose which users will be assigned to this permissions group. You can search for specific employees by name.
-
Click the Save button to create your permissions
group.
Understanding Permission Types
In the Review step, you will see permissions categorised as:
- Full permissions: When you have selected all available actions for a specific module
- Partial permissions: When you have only selected some actions for a module (e.g., only viewing employee files but not modifying them)