Users, roles and permissions

Nothing in the platform keys off a role's name. Copy an existing role, adjust the permissions, and call it whatever your organisation calls it.

The sidebar each person sees is derived from their permissions, so a role without payroll access simply has no payroll section — rather than a section that errors when clicked.

Salary visibility is a separate permission from employee records, and viewing is separate from managing throughout. A manager can approve leave without seeing pay; an HR assistant can maintain records without running payroll.

Removing someone's access takes effect immediately, not at their next sign-in.