Understanding Roles and Permissions
WorkVell uses Role-Based Access Control (RBAC). Following the principle of least privilege — granting each user only the permissions they need — is critical.
【Main roles and permissions】
Super Admin (System Administrator)
· Configure settings, manage users, and manage billing across all tenants
· Read/write access to all modules
Tenant Admin
· Full settings and user management within their own tenant
· View and edit all payroll, HR, attendance, and other data
HR Admin
· Manage employee master data, attendance, evaluations, and recruitment
· Payroll data: view only (configurable)
Manager (Department Manager)
· Approve attendance records and requests for their own department members
· View department reports
Employee (General User)
· View and submit their own data only
· No access to other people's data
【Principle of least privilege】
Grant only the permissions required for the role, and nothing more.
Permissions are granted and modified from the account management screen.
【When to review permissions】
· On personnel transfers or role changes
· Deactivate accounts for departing employees immediately
· Conduct periodic permission audits (1–2 times per year recommended)
【How to create a role】
For step-by-step instructions and permission-level guidance, see “How to Create a Role and Set the Permission Level (#SEC-005).”
這篇文章對您有幫助嗎？