Select your platform and then browse by platform category

Who are you and what section are you in?

Work site-based Permission settings

Available for the following plans: Lite, Plus, Unlimited HR, Unlimited HR+Payroll
Time & Attendance Add-on
Available for the following  HR Classic plans:  Platinum
Available for the following user access levels: Admin

Important

⚠️Work Sites & Positions Rostering: This version of rostering uses work sites and employee positions instead of cost centres. It's currently available to customers who joined Employment Hero recently. Existing customers will be migrated to Employment Hero over the coming months.

Work site-based Permission Settings (CSS) provides precise permission control for admins over rostering management, timesheet management, and time reporting based on specific work sites. This feature reduces over-permissioning by allowing administrators to grant targeted access instead of broad organisational permissions, leading to improved security, better user experience, and increased adoption of Employment Hero rostering, timesheets, and time reports.

When you configure work site-based permissions, users will only see and manage employees assigned to work sites they have permission to access. This creates a cleaner interface and more focused workflow for your team.

Alternatively, admins can now grant line managers access to manage schedules specifically for their direct reports using the Reporting Employees permission group, without requiring broad organisational or work site-based permissions.

Configure rostering management permissions

Click here for a step-by-step guide
  1. Log in to Employment Hero.
  2. On the left-hand side menu, click Settings.
  3. In the Security and Access Control section, click on Permissions.
  4. Click on the Add Permission button or select an existing permission group (such as Reporting Employees).
  5. Click on Skip and configure on my own.
    skip and configure on my own
  6. Enter the name of this group.

  7. Add a description for the group.
  8. Under the Employee Access subheading, select Work Sites and choose the work site from the drop-down menu, or configure via Reporting Employees to restrict visibility to direct reports.
    click on worksites and choose work site from dropdown menu

  9. Click on the Next button.
  10. Under the Contractors subheading, select which contractors will gain access (if applicable).

  11. Click on the Next button.

  12. In the Employee Permissions section, click on Use for which modules the employees will have access to in your chosen work site or scoped area. Select from the following:

    • Work sites and positions - users will be able to manage work sites and positions.
    • Rostering - users will be able to manage employee rosters and view related budget and shift cost information. If enabled for the Reporting Employees permission group, managers will gain access to Rostering Management covering shift management, Auto-Rostering, and templates exclusively for their direct reports.
    • Timesheets - Manage employee timesheets and view related cost information.
    • Reports (Time Reports) - users will be able to access Time Reports scoped to their assigned work sites. Expand this permission group to grant access to all Time Reports at once, or select individual reports:
      • Accrued Leave Report
      • Leave Taken Report
      • Lateness Report
      • Live View Report
      • Return to Work Report
      • Roster Report
      • Roster vs Timesheet Report
      • Timesheet Report


    on the employee permissions page choose which features you want this work site permission group to have

  13. Click on the Next button. 
  14. In the Contractor Permissions section, select which modules the contractors will have access to in your chosen location (if applicable).
  15. Click on the Next button.
  16. In the General Permissions section, select which modules the new group will have access to in your chosen location.
  17. Click on the Next button.
  18. In the Review Security Group section, review the security groups settings. Once you are satisfied, click on the Next button.
  19. Under Who will have these permissions? select the employees who have access to this group's security settings.
  20. Click on Save.

Further information

Employee visibility
Users will only see employees assigned to work sites they have permission to access. If configured under the Reporting Employees permission group, managers will only see and manage schedules for their direct reports. Managers already configured with All Employees or Work Sites access are unaffected.
Cascading permissions
Work site restrictions apply across all related rostering, timesheet, and time reporting features. Time Reports will only display data, totals, summaries, and exports for the work sites the user is authorised to access.
Permission inheritance
Users cannot access data outside their permitted work sites, even if they have other CSS permissions.
Reports navigation visibility
The Reports navigation item is only visible to non-admin users who have both a Time Reports permission enabled and at least one assigned work site. Global Admin behaviour is unchanged.

Explore related content

Was this article helpful?
0 out of 1 found this helpful