GIF
Settings

Roles & Permissions

Overview

There are 3 main default roles in Humi - admin, manager, and employee. The permissions will allow for different levels of access to Humi. Admins will have unrestricted access to all areas, manager allows for managerial type access, and employees will have employee type access. By default, everyone gets an employee role. So although, someone may be a manager listed in the org chart, they will need at-least a manager role to access and manage their team's profile, such as approve/deny time off requests, assign reviews, and view their employment information.

We have set the default roles as a standard however, as an admin you will have the ability to create a custom role that allows you to modify one of the default role or create a new one from scratch. Users can have more than 1 role assigned to them and can be toggled through based on the actions required for each role.

What are default roles?

The default roles are pre-set permissions for employees, managers, and admins. All users will default be assigned to the employee role but in most cases, you may have employees that will need access to view their team, manage time off requests, access payroll, recruiting, and etc. This is when you will need to assign either the manager or admin role.

Please note that when importing your employee data, if you have entered in 'Manager' or 'Admin' in the 'Employee Role' field, they will already be assigned to these default roles.

What information can the default roles access?

Admin

The default admin role will allow unrestricted access to all areas of the applications.

Manager

The default manager role allows for managerial type access to the system for their direct reports. This includes access to People, Time Off, Performance, Benefits, and Training and being able to view and edit fields within their direct report's profile.

Employee

The default employee role allows for employee type access to the system. This includes viewing their own personal information, emergency contacts, banking information, documents, and reminders. Employees on this role will be restricted from viewing other employee's personal and sensitive information.

Creating a Custom Role

After reviewing the default roles, you may need to remove or grant additional permission levels. This is when you will need to create a custom role - you will have the ability to customize it based on your requirements. For example, the default manager role has access to view birthdays for their direct reports however, you may want to remove this data to be shown to the manager.

To create a custom role, click on the + sign at the bottom right-hander corner from the roles & permissions overview, you will be prompted to choose one of the default roles to copy or you can create a role from scratch. Copying one of the default roles will save all the pre-set permissions therefore, you can modify just the select fields you need. Choosing 'create a role from scratch' will allow you to build a role from a blank slate.

Once you have determined the type of role, you will be prompted to name this role and add a description. Keep in mind the name will appear for the employee and the description is to help you identify what this role entails. You will then be taken to the module access, this controls which specific modules and features are accessible to this role. The next page 'Permission Levels' will control which employee profile data is viewable by this role. Granting edit permissions allows this role to create, update, and delete information.

Now that you have named the custom role, selected the modules and permission levels, you can save the role and assign it to the appropriate employees. Once the employees are assigned this role, they can toggle through their individual roles when logged in to Humi.

Additional Permissions for Hiring Managers

In addition to being able to control whether not a custom role has the ability to add new employees to the system, administrators can also limit the roles that hiring managers are able to assign to new hires.

By default, newly-created custom roles with hiring permissions will only be able to assign the default “Employee” role. In order to modify this list, click the “Edit” button under the “Hire New Employees” toggle, as shown below:



Now, you are able to select which roles can be assigned by this role during the new hire flow. For example, if you only wanted users of this role to be able to assign the default “Employee” role, you would configure the list like this:


With this configured, whenever the user (or any other user in this role) is hiring new employees, their list of available roles will be restricted based on your selection, as shown here: