Appendix E — Permission reference

Every permission in Operentra, grouped by module, with the default roles that hold it. Roles can be edited and new ones created under Access Control › Roles (Chapter 14); this table shows the defaults a new workspace starts with. Super Admin holds every permission.

Abbreviation	Role	Built for
SA	Super Admin	Full system access — company configuration, all modules, all operations
HRM	HR Manager	Employee management, attendance, leave, payroll processing
HRO	HR Officer	Day-to-day HR operations, limited payroll access
Acc	Accountant	Payroll processing, salary disbursement, tax, cheques, loans
DH	Department Head	Team attendance and leave, approvals for direct reports, appraisal reviews
Emp	Employee	Self-service: own profile, attendance, leave, salary slips

Company

Permission	Name	Default roles
View Company	company.view	SA, HRM, HRO, Acc
Update Company	company.update	SA
Manage Settings	company.settings	SA, HRM

Employees

Permission	Name	Default roles
View All Employees	employees.view_all	SA, HRM, HRO, Acc
View Team Employees	employees.view_team	SA, HRM, HRO, Acc, DH
View Own Profile	employees.view_own	SA, HRM, HRO, Acc, DH, Emp
Create Employee	employees.create	SA, HRM, HRO
Update Employee	employees.update	SA, HRM, HRO
Delete Employee	employees.delete	SA, HRM
Import Employees	employees.import	SA, HRM
Manage Mobile Verifications	mobile_verification.manage	SA, HRM, HRO
Confirm Employee After Probation	employees.confirm	SA, HRM

Documents

Permission	Name	Default roles
View All Documents	documents.view_all	SA, HRM, HRO
View Own Documents	documents.view_own	SA, HRM, HRO, Emp
Upload Documents	documents.upload	SA, HRM, HRO, Emp
Verify Documents	documents.verify	SA, HRM, HRO

Contracts

Permission	Name	Default roles
View Contracts	contracts.view	SA, HRM, HRO, Acc
Create Contract	contracts.create	SA, HRM, HRO
Update Contract	contracts.update	SA, HRM

Attendance

Permission	Name	Default roles
View All Attendance	attendance.view_all	SA, HRM, HRO, Acc
View Team Attendance	attendance.view_team	SA, HRM, HRO, Acc, DH
View Own Attendance	attendance.view_own	SA, HRM, HRO, Acc, DH, Emp
Mark Attendance	attendance.mark	SA, HRM, HRO
Bulk Mark Attendance	attendance.bulk_mark	SA, HRM
Approve Regularization	attendance.regularize_approve	SA, HRM, DH
Request Regularization	attendance.regularize_request	SA, HRM, HRO, Acc, DH, Emp
Approve Overtime	attendance.overtime_approve	SA, HRM, DH
Manage Attendance Settings & Shifts	attendance.manage	SA
Manage Geo Attendance Locations	attendance.geo_manage	SA, HRM

Field visits

Permission	Name	Default roles
View Field Visits & Clients	field_visits.view	SA, HRM, HRO
Manage Field Visits (clients, field staff, settings)	field_visits.manage	SA, HRM

Leave

Permission	Name	Default roles
View All Leaves	leave.view_all	SA, HRM, HRO
View Team Leaves	leave.view_team	SA, HRM, HRO, DH
View Own Leaves	leave.view_own	SA, HRM, HRO, Acc, DH, Emp
Apply Leave	leave.apply	SA, HRM, HRO, Acc, DH, Emp
Approve Leave	leave.approve	SA, HRM, DH
Configure Leave Policies	leave.configure	SA, HRM
Allocate Leave	leave.allocate	SA

Payroll

Permission	Name	Default roles
View Payroll	payroll.view	SA, HRM, Acc
Process Payroll	payroll.process	SA, HRM, Acc
Approve Payroll	payroll.approve	SA, HRM
Lock Payroll	payroll.lock	SA, Acc
View All Salaries	payroll.salary_view_all	SA, HRM, Acc
View Own Salary	payroll.salary_view_own	SA, HRM, HRO, Acc, DH, Emp
Assign Salary	payroll.salary_assign	SA, HRM, Acc
Configure Payroll	payroll.configure	SA, HRM
Manage Payroll	payroll.manage	SA, Acc
Hard-Delete Payroll Adjustments	payroll.adjustment_delete	SA

Salary slips

Permission	Name	Default roles
Generate Salary Slips	salary_slips.generate	SA, HRM, Acc
View All Salary Slips	salary_slips.view_all	SA, HRM, Acc
View Own Salary Slips	salary_slips.view_own	SA, HRM, HRO, Acc, DH, Emp
Email Salary Slips	salary_slips.email	SA, HRM, Acc

Cheques

Permission	Name	Default roles
Manage Cheques	cheques.manage	SA, Acc
Print Cheques	cheques.print	SA, Acc

Tax

Permission	Name	Default roles
Configure Tax	tax.configure	SA, HRM, Acc
Manage Tax Certificates	tax.certificates	SA, HRM, Acc
View Own Tax	tax.view_own	SA, HRM, HRO, Acc, DH, Emp

Loans

Permission	Name	Default roles
View All Loans	loans.view_all	SA, HRM, Acc
View Own Loans	loans.view_own	SA, HRM, HRO, Acc, DH, Emp
Apply for Loan	loans.apply	SA, HRM, HRO, Acc, DH, Emp
Approve Loans	loans.approve	SA, HRM, Acc
Configure Loan Types	loans.configure	SA, HRM

Holidays

Permission	Name	Default roles
Manage Holidays	holidays.manage	SA, HRM, HRO
View Holidays	holidays.view	SA, HRM, HRO, Acc, DH, Emp

Announcements

Permission	Name	Default roles
Manage Announcements	announcements.manage	SA, HRM, HRO
View Announcements	announcements.view	SA, HRM, HRO, Acc, DH, Emp

Dashboard

Permission	Name	Default roles
Admin Dashboard	dashboard.admin	SA
Personal Dashboard	dashboard.personal	SA

Reports

Permission	Name	Default roles
View All Reports	reports.all	SA, HRM, Acc
View Department Reports	reports.department	SA, HRM, HRO, Acc, DH
View Own Reports	reports.own	SA, HRM, HRO, Acc, DH, Emp

Audit

Permission	Name	Default roles
View Audit Logs	audit.view	SA, HRM

Roles

Permission	Name	Default roles
Manage Roles	roles.manage	SA

Users

Permission	Name	Default roles
Manage Users	users.manage	SA, HRM
Sign in as another user	users.impersonate	SA

Hr letters

Permission	Name	Default roles
Manage HR Letters	hr_letters.manage	SA, HRM
View Own HR Letters	hr_letters.view_own	SA, HRM, HRO, DH, Emp
Manage HR Letter Requests	hr_letters.manage_requests	SA, HRM, HRO
Request HR Letters	hr_letters.request	SA, HRM, HRO, DH, Emp

Email templates

Permission	Name	Default roles
Manage Email Templates	email_templates.manage	SA

Print

Permission	Name	Default roles
Print Salary Slips	print.salary_slips	SA, HRM, Acc, Emp
Print Attendance	print.attendance	SA, HRM, HRO, Acc, DH, Emp
Print Payroll Sheet	print.payroll_sheet	SA, HRM, Acc
Print Cheques	print.cheques	SA, Acc
Print Tax Certificates	print.tax_certificates	SA, HRM, Acc
Print Reports	print.reports	SA, HRM, HRO, Acc, DH
Print Contracts	print.contracts	SA, HRM

Biometric

Permission	Name	Default roles
View Biometric Devices	biometric.view	SA, HRM, HRO
Manage Biometric Devices	biometric.manage	SA, HRM

System backup

Permission	Name	Default roles
View System Backups	system_backup.view	SA
Manage System Backups	system_backup.manage	SA

Integrations

Permission	Name	Default roles
Manage SMS Providers	sms.manage	SA, HRM

Appraisals

Permission	Name	Default roles
Configure Appraisal Settings	appraisals.configure	SA, HRM
Manage Appraisals	appraisals.manage	SA, HRM
Review Team Appraisals	appraisals.review	SA, HRM, DH
View Own Appraisals	appraisals.view_own	SA, HRM, HRO, Acc, DH, Emp

Assets

Permission	Name	Default roles
Manage Assets (CRUD, Issue, Return, Categories)	assets.manage	SA, HRM, HRO
View All Assets	assets.view_all	SA, HRM, HRO, Acc, DH
View Own Assets	assets.view_own	SA, HRM, HRO, Acc, DH, Emp

Offboarding

Permission	Name	Default roles
Manage Offboarding (Separations, Clearance, Final Settlement)	offboarding.manage	SA, HRM
View Offboarding Records	offboarding.view	SA, HRM, HRO, Acc

Onboarding

Permission	Name	Default roles
Manage Onboarding Pipelines & Tasks	onboarding.manage	SA, HRM, HRO
View Onboarding Pipelines	onboarding.view	SA, HRM, HRO, Acc, DH

Expenses

Permission	Name	Default roles
Submit Own Expense Claims	expenses.submit_own	SA, HRM, HRO, Acc, DH, Emp
Approve Team Expense Claims (Manager)	expenses.approve_team	SA, HRM, DH
Final-Approve + Configure Expense Module (HR/Finance)	expenses.manage	SA, HRM, Acc
View All Expense Claims	expenses.view_all	SA, HRM, HRO, Acc

Recruitment

Permission	Name	Default roles
Manage Recruitment (Jobs, Candidates, Applications, Offers)	recruitment.manage	SA
Submit Interview Feedback (Interviewers)	recruitment.interview	SA
View Recruitment Records (Read-Only)	recruitment.view	SA

Performance

Permission	Name	Default roles
Configure Performance Module (Settings, Scorecard Profiles, Any Task)	performance.manage	SA, HRM
Assign Tasks + View Team Performance (Manager)	performance.review	SA, HRM, DH
View All Employee Performance Scores	performance.view_all	SA, HRM, HRO
View Own Tasks, Score + Submit Daily Reports	performance.view_own	SA, HRM, HRO, Acc, DH, Emp

Api

Permission	Name	Default roles
Manage API Keys (Create, Revoke, View Usage)	api.manage	SA