Admin roles and permissions
Understand the five admin roles, what each permission allows, and how to fine-tune access for each admin user.
On this page
Every admin user has a role. The role sets a starting group of permissions, which you can then fine-tune person by person. This lets you give each colleague exactly the access they need.
The five roles
| Role | Best for | Default access |
|---|---|---|
| Administrator | Owners and HR heads | Full access, including admin users and settings |
| HR manager | HR team | People, attendance, leave, Core HR, hiring, performance and engagement, plus departments, holidays, shifts and reports |
| Payroll manager | Payroll and finance | Payroll, salary, expenses and loans; can view people, attendance and leave; reports |
| Line manager | Team leads | Views people, attendance and leave; approves leave; views performance and reports |
| Viewer | Auditors, accountants, leadership | Read-only access to everything they can view |
Permissions you can grant
| Group | Permissions |
|---|---|
| Employee Management | View employees & profiles · Add, edit & delete employees |
| Time & Attendance | View attendance records · Edit attendance & biometric devices |
| Leave Management | View leave requests & balances · Approve/reject leaves, manage types |
| Payroll | View payslips & salary structure · Run payroll, edit salary, FnF, deduction rules & adjustments |
| Core HR | View documents, assets, letters, onboarding & exits · Manage them |
| Expenses & Loans | View expense claims, loans & advances · Approve claims, issue loans & advances |
| Performance | View goals & reviews · Run review cycles, manage goals |
| Hiring | View jobs & candidates · Manage jobs, candidates, interviews & offers |
| Engage & Helpdesk | Post announcements, moderate praise · Handle helpdesk tickets |
| Organization | Manage departments & designations · Manage holidays · Manage shifts · Organization settings |
| Administration | Manage admin users & permissions |
| Reports | Access reports · Export data |
| Developer & API | API dashboard & keys |
Manage includes view
When you tick a "manage" permission, the matching "view" permission is ticked too. You can't manage something you can't see.
Fine-tune someone's access
- Go to Settings → Admin Users ( open Admin users).
- Click the edit icon on the person's row.
- Choose a Role. The permission ticks change to that role's defaults.
- Tick or untick individual Permissions. Click Reset to role defaults to start again.
- Click Save.
The Access column then shows Full access for administrators, or the number of permissions for everyone else.
How permissions show up in the app
- Menu items you don't have permission for are hidden.
- Opening a page directly without permission shows "You do not have permission to access this page." and takes you back.
- Permissions only work inside the modules your plan includes. See A menu item is missing or a page is blocked.
Employees and managers
These roles are for the admin portal. Employees use the employee portal, and reporting managers approve their team's requests from My Team there. See My Team for managers.
Still stuck? Email info@cybexinnovation.com or WhatsApp +91 89277 73048.