What are the user roles?

In this article

Available user roles

Default access per role

Available user roles

Appogee HR supports the below roles: 

User Roles

At least one employee in the organisation should be given a user role or HR Manager or Admin. Team Managers will be assigned automatically and ADU Admins are only available where ADUs/Divisions are enabled.

Restricted Staff (optional)
Restricted Staff roles are not mandatory, but can be configured to give users additional access to some employee data. These roles are optional and highly configurable.  These roles come with a set of default permissions (summarized below) which can be configured in the Process Configuration menu.  You must review these permissions to ensure these defaults meet your requirements.  

NOTE: Restricted Staff roles are visible in the Config screens, regardless of whether you have assigned them to a user or not.

For more information and to help you set up your user roles take a look at the following articles:Configuring user Roles & Access and Categories & Fields Configuration.

Default access per role

The next section details the default access for each User Role and Restricted Role, however these can be configured to allow different access within your organization. 

Employee

A joining, active or former member of the organisation for whom Employee Records and an Employee Profile are held within the system. You cannot explicitly assign this role as access is automatically granted when a user is added to the system. 

Team Manager

A user is automatically assigned the Team Manager role when they are made a manager of at least 1 team. Managers have access to the additional sections on the Dashboard, including My Actions, My Teams, Team Allowances and also the Reporting process on the menu.

A Team Manager can have either a reader or editor role in a Team that they manage. A reader role will give them read access to data of employees they manage and an editor role will give them access to edit the data of employees they manage.

HR Manager

The HR Manager role allows you the following permissions by default: 

• Full edit access to employee data
• Full edit access to organisation configuration including adding employees & assigning managers
• Ability to manage Roles & Access of employees
• Full access to reporting
• Access to Leave & HR Admin tools (Leave > Admin & Config)
  • Work Profiles
  • Public Holidays
  • Allowance Calculator
  • Adjust Allowance Range
  • Bulk Adjust Allowances
  • Backfill
  • Bulk Update Employee Profiles (HR Essentials & Success packages only)

• Access to Process Config (Profile > Admin & Config) 
  • HR Configuration (HR Essentials & Success packages only) 
    • Edit Categories & Fields
    • Edit Field & Record Security
    • Edit Company Documents Types & Security 
    • Configure the Onboarding Portal (HR Success package only)
    • Configure Performance Review Types (HR Success package only)
    • Configure Goals security (HR Success package only)
  • Leave Configuration
    • Edit Leave & Sickness Types
    • Configure Leave Security
    • Configure Compulsory Days
    • Edit Email Templates
    • Set up Google Team Calendars (Google Workspace Integrated accounts only)

For more information on Team Manager access or HR Manager access, please see the relevant guides - Appogee HR or Appogee Leave.

Admin

The Admin role allows you the following permissions by default: 

• Edit access to a limited amount of employee data (everything on the 'Employee Admin' page)
• Full edit access to organisation configuration including adding employees & assigning managers
• Ability to manage Roles & Access of employees
• Access to Process Config 
  • HR Configuration (HR Essentials & Success packages only) 
    • Edit Categories & Fields
    • Edit Field & Record Security
    • Edit Company Documents Types & Security 
    • Configure the Onboarding Portal (HR Success package only)
    • Configure Performance Review Types (HR Success package only)
    • Configure Goals security (HR Success package only)
  • Leave Configuration
    • Edit Leave & Sickness Types
    • Configure Leave Security
    • Configure Compulsory Days
    • Edit Email Templates
    • Set up Google Team Calendars (Google Workspace Integrated accounts only)
• Access to System Config
  • Configure General Settings & Customisation
  • Add Verified Domains
  • Manage Divisions/ADUs
  • Manage Integrations

ADU Admin

This role is only applicable is ADUs/Divisions are enabled for an organisation. The ADU Admin role grants access to configure ADUs/Divisions as well as manage all employee, regardless of ADU/Division. 

IT Manager

Users with the IT Manager role have read access to basic employee data found in the Employee Profile section (such as name and work email address) and have edit access to all fields in the Assets section for all Employees.

Payroll Admin

Users with the Payroll Admin role have read access to basic employee data found in the Employee section (such as name, address, and salary) and edit access to employee bank details tab on the Personal profile page.

HR Assistant

Users with the HR Assistant role have read access to all employee data, except information in the Discipline tab.