API Access
Create API keys so your own systems can read employees, attendance, and leave over a REST API.
Read more All features
Roles & Permissions
Granular, per-organization RBAC - assign exactly the right access to every role, out of the box or custom.
Overview
Roles & Permissions controls who can see and do what. Each organisation gets sensible default roles and can create its own, with permissions set by module and action.
It keeps sensitive information such as pay and personal details in the right hands, while letting people do their jobs without friction.
How it works - step by step
- 1Start with the default roles that come with your organisation.
- 2Create custom roles for specific needs - for example a payroll clerk or a recruiter.
- 3Choose permissions for each module and action.
- 4Assign roles to people when you add them or when their role changes.
- 5Managers automatically see only the people in their scope.
- 6Review roles regularly and remove access that is no longer needed.
Key capabilities
- Default roles for administrators, HR, managers, and employees.
- Custom roles with permissions per module and action (view, create, edit, approve, export).
- Scope controls so managers see only their own team where appropriate.
- Per-organisation roles that never leak across organisations.
- Easy reassignment as people change jobs.
- Feature switches that let administrators turn optional modules on or off.
Benefits
- Sensitive data stays with the right people.
- Less risk of accidental changes or leaks.
- Roles that match how your organisation works.
- A clear basis for audits and compliance.
Who gets what
- Administrators: full control over access and optional modules.
- HR: the right level of access to people data.
- Everyone else: only the access they need, nothing more.
What it replaces
- Shared logins and passwords.
- Files with open access on shared drives.
- Informal “ask HR for access” processes.
Common questions
Can we create our own roles?
Yes. Beyond the defaults, you can create custom roles with exactly the permissions you choose.
Do managers see everyone’s data?
No. Manager access is scoped to their own team where you configure it that way.
Is one organisation’s role setup visible to another?
No. Roles and data are separate for each organisation.
Can we switch optional modules on and off?
Yes. Administrators can enable optional features per organisation when they need them.
See Roles & Permissions in action
Give the least access that lets someone do their job, then add more when a real need appears.
You may also like
More to read, picked for the topics on this page.