Permissions & Roles

Create permission groups, assign module-level access, and manage sub-admin roles.

Permission Groups

Permission groups let you define sets of access rights and assign them to employees or managers.

Each group specifies which modules are visible and what actions the member can perform.

AttendUX — Permission Groups

Permission Groups

Creating a Permission Group

Permission groups list screenshot

Click "+ New Group" and follow the steps below.

Give the group a descriptive name, e.g., "Branch Manager" or "HR Viewer".

Tick the modules this group can access and choose the access level for each.

Click Save. The group is now available to assign to employees.

The following modules can be individually toggled per permission group:

Module	Description	Available Actions
Employees	View, add, edit, delete employee records.	Create / Edit / Delete
Attendance	View, edit, approve attendance records.	Create / Edit / Delete
Vacations	View, approve, reject vacation requests.	Approve / Reject
Payroll	View, generate, export payroll.	Generate / Export
Reports	View and export reports.	View
Shifts	View, create, assign shifts.	Create / Edit / Delete
Expenses	View, approve, reject expense claims.	Approve / Reject
Settings	View and modify system settings.	Modify

After creating a group, assign employees so they inherit the group's access rights.

Open the group → "Members" tab → select employees from the list → Save.

Tip: An employee can belong to only one permission group. Changing groups removes the previous access.

A sub-admin is a special role that can manage a specific branch or department without full system access.

Sub-admins can be restricted to see only their branch's employees, attendance, and reports.

Role	Description	Access Level
Super Admin	Full access to everything including billing and license management.	Full Access
Admin	Full access to HR modules but no billing or license settings.	Full Access
Sub-Admin	Access limited to assigned branch/department modules.	Limited Access
Employee	Self-service only: view own attendance, payslips, requests.	Self-Service Only

Warning: Only the Super Admin can create or modify sub-admin accounts. Sub-admins cannot access billing or license settings.

You want branch managers to handle attendance and vacations for their branch only, without seeing payroll or settings.

Go to Permissions → "+ New Group". Name it "Branch Manager".

Enable Employees (view only), Attendance (view + edit), Vacations (view + approve), and Reports (view). Leave Payroll and Settings unchecked.

Open the group's Members tab, select the branch manager, and save.