Roles & Permissions
Roles
A user can have one or more roles. Each role determines the accessible modules and authorized actions.
Important
The SUPER_ADMIN role is reserved for the technical team that manages the entire platform. Business operations (agents, leaves, schedules, payroll, terminals) are reserved for tenant roles.
Main role matrix
| Role | Main permissions |
|---|---|
ADMIN | Full access to the tenant (employees, users, settings). |
HR_MANAGER | Employee management, schedules, reports. |
LEAVE_APPROVER | Approve or reject leave requests. |
PAYROLL_MANAGER | Access payroll data and salary scales. |
VIEWER | Read-only access to attendance and reports. |
SUPER_ADMIN | Platform administration (tenants, platform users). |