Administration
Roles & permissions
Eight roles, seventeen modules, and a few constraints that cannot be configured away — nobody prepares and approves the same bill.
Roles
8
1 read-only
Permissions tracked
17
per module
Users with full control
1
Super Administrator
Roles that can lock a bill
2
Approving Authority, Super Admin
Roles that see Aadhaar
2
Establishment, Super Admin
Last matrix change
04-06-2026
Operator lost adjustment rights
Who can do what
Permission matrix
| Module | Super Admin | Payroll Admin | Payroll Officer | Operator | Accounts Officer | Approving Authority | Establishment | Auditor |
|---|---|---|---|---|---|---|---|---|
| Employee master | Full | Full | View | View | View | View | Full | View |
| Pay structure | Full | Full | Edit | View | View | View | View | View |
| Recoveries & loans | Full | Full | Edit | Enter | Approve | View | View | View |
| Attendance & leave | Full | View | View | Enter | View | Approve | Full | View |
| Overtime & NDA | Full | Edit | Edit | Enter | View | Approve | View | View |
| Arrears | Full | Full | Edit | — | Approve | Approve | — | View |
| Income tax | Full | Full | Edit | Enter | Full | View | — | View |
| Payroll calculation | Full | Full | Run | Prepare | View | View | — | View |
| Manual adjustments | Full | Full | Limited | — | Tax heads | — | — | View |
| Bill approval | Full | — | Verify | — | Verify | Approve | — | View |
| Bill locking & reopening | Full | — | — | — | — | Lock | — | View |
| Reports & printing | Full | Full | Full | Own work | Full | Full | Employee only | Full |
| Aadhaar & PAN visibility | Full | Masked | Masked | Masked | Masked | Masked | Full | Masked |
| Rules & parameters | Full | Propose | — | — | — | — | — | View |
| Users & roles | Full | — | — | — | — | — | — | View |
| Backup & restore | Full | — | — | — | — | — | — | View |
| Audit trail | Full | Own section | Own section | — | Own section | Own section | Own section | Full |
8 roles
What each role is for
Super Administratorsystem control, rules, users, restore1 user
Payroll Administratoremployee and payroll management2 users
Payroll Officercalculation, verification, limited adjustment3 users
Payroll Operatordata entry and preparation only6 users
Accounts Officerverification, tax heads, financial reports2 users
Approving Authorityapproves and locks the bill2 users
HR / Establishmentservice records, attendance, leave5 users
Auditorread-only across everything, including the trail3 users
Hard constraints
Separation of duties
Prepare and approveno user may do both on the same billEnforced
Adjust and verifydifferent users requiredEnforced
Create a user and approve a billmutually exclusiveEnforced
Restore a backupSuper Administrator, with a second sign-offEnforced
Reopen a locked billreason recorded on the bill itselfEnforced
Auditorcannot write anything anywhereEnforced