Role-based access means the HR dashboard does not show everything to everyone. Each role sees and changes only what it needs, and it is one of the safeguards atWork lists on its security page, alongside TLS in transit, monitoring, logging, incident response, updates and backups.
How roles are used
- A group admin runs budgets, locations and people for every site.
- A site admin follows their own site.
- A finance viewer sees spend and invoices.
- Employees see only their own account.
Roles are mapped with your company at kick-off. You can read how the roles are laid out on the enterprise page.
What roles protect
Because each admin sees and changes only what their role allows, a company with several offices can give every site the view it needs without handing out access to everything. Every admin action is also recorded. See how the audit log records admin actions.
