5 roles · 12 custom rules · 128 members. Edit what each role can see, do, and approve — across every app.
| Feature | Owner | HR Admin | Manager | Employee | Contractor |
|---|---|---|---|---|---|
| HRMS | |||||
| View employees | All | All | Team | Self | — |
| Edit profile fields | All | All | Direct | Self | — |
| View attendance | All | All | Team | Self | Self |
| Validate attendance | All | All | Direct | — | — |
| Approve leave | All | All | Direct | — | — |
| View payroll | All | All | — | Self | Self |
| Run payroll | All | All | — | — | — |
| Onboarding workflows | All | All | Team | — | — |
| Publish announcements | All | All | Dept | — | — |
| Manage assets | All | All | Team | Request | Request |
| HR settings | All | All | — | — | — |
| Projects | |||||
| View projects | All | — | All | Assigned | Assigned |
| Create projects | All | — | Team | — | — |
| Edit tickets | All | — | All | Assigned | Assigned |
| Team capacity | All | — | Direct | — | — |
| Project settings | All | — | Owned | — | — |
| Admin | |||||
| Manage users & roles | All | View | — | — | — |
| Billing | All | — | — | — | — |
| Security & SSO | All | — | — | — | — |
| Audit log | All | HR-only | — | — | — |
| Integrations & tokens | All | — | — | — | — |
Layer conditional overrides on top of roles. Rules stack additively — never restrict the base role.
| Person | Role | Department | Custom rules | Effective access | Last access | |
|---|---|---|---|---|---|---|
A Alex Chen | Owner | Operations | — | 100% · all apps | 2 min ago | |
P Priya Shah | HR Admin | Marketing | +1 rule | 82% · HR + ME + audit | 18 min ago | |
T Tom Reyes | Manager | Engineering | +1 rule · self-approve PTO | 64% · HR-team + PR + ME | 1h ago | |
M Maya Patel | Employee | Design | — | 28% · self + PR-assigned | 9:18 AM | |
K Kai Wright | Contractor | External | +1 rule · scope lock | 14% · PR-assigned only | Yesterday | |
S Sam Okafor | HR Admin | People | — | 82% · HR full | 3h ago |