Manage roles and permissions

Roles decide which pages and actions a user can access.

Use the least access needed

Assign team members only the permissions required for their job. Managers may need scheduling and people access, while employees normally need their own rota, availability, leave, and documents.

Review sensitive access

Only trusted administrators should manage billing, security, roles, staff termination, payroll exports, or account impersonation.

Keep an audit trail

Changes to sensitive records are written to the workspace audit log with the acting user and time.