Roles and Permissions in OpenHRApp
OpenHR uses role-based access control (RBAC) to ensure each user sees only what they need and can only perform actions appropriate to their role. This guide covers every role and its exact permissions.
This is a sub-guide of Welcome to OpenHR — read that first for a general overview.
Available Roles in OpenHR
| Role | Description |
|---|---|
| ADMIN | Full system access. Can configure everything in Organization Settings. |
| HR | Manage employees, leaves, and policies. Similar to Admin but focused on HR functions. |
| MANAGER | Oversee team attendance and approve leaves for direct reports. |
| TEAM_LEAD | Lead a team. Can be configured as a leave approver. |
| EMPLOYEE | Standard user. Can clock in/out, apply for leave, and view personal data. |
Complete Permission Matrix
| Feature | Admin | HR | Manager | Team Lead | Employee |
|---|---|---|---|---|---|
| Dashboard (full stats) | Yes | Yes | Team only | Team only | Personal |
| Employee Directory | Full CRUD | Full CRUD | View team | View team | View teammates |
| Organization Settings | Full access | Full access | No | No | No |
| Attendance Clock In/Out | Yes | Yes | Yes | Yes | Yes |
| Attendance Audit | Yes | Yes | Team only | No | Own only |
| Leave Apply | Yes | Yes | Yes | Yes | Yes |
| Leave Approve (Manager) | Override | Override | Direct reports | If configured | No |
| Leave Approve (HR) | Yes | Yes | No | No | No |
| Leave Create/Edit/Delete | Yes | Yes | No | No | No |
| Reports | All | All | Team scope | No | No |
| Profile/Settings | Yes + Admin tools | Yes | Yes | Yes | Yes |
Key Access Rules to Understand
- Managers can only see employees in their teams and their direct reports. They cannot access other departments.
- Employees can see their teammates but cannot edit anyone's information.
- Admin and HR have organization-wide visibility.
- Leave approval follows the configured workflow — Managers approve first, then HR gives final approval.
Related Guides
- Welcome to OpenHR — Overview of all features.
- Managing Employees — How to add employees and assign roles.
- Attendance Audit for Admins — Role-scoped attendance visibility.