User permissions
When you want to give privilege to a particular user, you can do this by changing the User Level of the user or using the IceHrm User Role option.
Last updated
When you want to give privilege to a particular user, you can do this by changing the User Level of the user or using the IceHrm User Role option.
Last updated
The latest documentation is available here.
With the updated user permission module IceHrm now supports the following user levels:
Admin
Manager
Employee
Restricted Admin
Restricted Manager
Restricted Employee
Admin user level has all the access to the IceHrm account, while the manager has limited access to administration functionalities.
For example, under the leave module, a manager can see their subordinates leave days, can approve leaves, grant leaves. But as an admin, you can see leave requests from all the employees and act on these requests.
An employee has all the to use the platform as an employee.
Let’s take an example scenario to understand how to grant admin access to one of your employees or managers:
You can log into the admin account
Go to the System section and click on the Users
Then click on the User tab in order to make changes
You can select the employee you want to make changes and click on the edit button
5. Now you can change the User Level of the employee to Admin.
Now you can select the user level as Admin and click on the Save button. So the particular user will have all the access granted for an admin.
Restricted User levels are the same as the other user levels but with restricted access. If you have not granted specific permission to a restricted user using a user role, they won't have any access rights.
Let's take an example, imagine there is an external recruitment manager who will become a temporary employee of your company only to manage the recruitment related activities.
In this case, you can add a Restricted Manager and grant only the required permissions.
This will involve providing granular entity-level permissions to a user role. There are 4 Different types of entity-level permissions:
List - User can load the list of entities
Get - User can view an individual entity
Add/Edit - User can add data or edit data
Delete - User can delete data
Log in to the admin account
Go to the System section and click on the Users
Then click on the User role tab and then click on the Add New option in order to create a New User role
Then you can give a specific name to the User role - For this one, you can use Recruitment Manager
Then click on Add to select the permission level
6. Select the Table and then the Permission level you need to grant and then click on Save ( According to the above example, this user only needs to view recruitment data and make adjustments, so we select List, Get, Add/Edit and Delete options for candidate, interview and application entities )
7. Now go to the Manage modules section under the System in order to assign the particular module to the new user role
8. Then click on the Modules tab and search for the particular module
9. Click on the edit button to make changes
10. Select all the modules required for the recruitment process and add the created User Role to all of these modules and save changes
Once you created the User role and then Assign the module now you can go back to the User section and click on the User tab in order to assign this to the manager
11. Select the user you want to make changes and click on the edit button
12. Now change the User Level of the employee into the Restricted Manager user level
13. Then add Recruitment Manager user role which you have already created
12. You won't be able to save the changes unless you have assigned a Default Module. This default module is important because that's what the users can see in their dashboard as they log in
Once you save the changes login to the Recruitment Manager's account, it will look like the below. And the recruitment manager will only have access to recruitment modules
Restricted Employee is also similar to the employee level but with restricted access. For example, imagine you need to give access to one of your sales persons only to mark attendance.
To do this;
Login to the admin account
Go to the System section and click on the Users
Then click on the User role tab and then click on the Add New option in order to create a New User role
Then you can give a specific name to the User role - For this one, you can use Sales Person or something similar
Then Select the Table and then assign Permission
6. Now go to the Manage modules section under the System in order to assign the particular module to the new user role
7. Then click on the Modules tab and search for the particular module
8. Click on the edit button to make changes
9. Add the created User Role to this module and save it
After creating the User role and Assigning the module, go back to the User section and click on the User tab in order to assign this role to the employee
10. Click on Add New to create a new user
11. Make sure the User Level of the employee is Restricted Employee user level
12. Then Select the specific user role which you have already created
13. Set a default module and then save
Once you save the changes and logged in to the employee's account it will look like the below. The employee will only have access to mark attendance
Denying access to one module for a particular user is easy as the same way that granting access.
Example: You want to deny access to the training module for one of your employees
To do this,
Login to the admin account
Go to the System section and click on the Users
Then click on the User role tab and then Add New option in order to create a New User role
Then you can give a specific name to the User role and save
5. Now go to the Manage modules section under the System in order to assign the particular module to the new user role
6. Then click on the Modules tab and search for the particular module
7. Click on the edit button to make changes
8. Select the created User Role to the Disallowed User Roles option and save it
After creating the User role and assigning the module now you can go back to the User section and click on the User tab in order to assign this to the user
9. Select the employee you want to make changes and click on the edit button or Click on Add New to create a new user
10. Change the User Level of the employee according to your requirement (for this example, select Employee as the user level)
11. Then Select the specific user role which you have already created, disallowing training module
12. Set a default module and then save
Log in as the employee and you will notice that the employee doesn't have the Training module
