Menu
|
Permission
|
Explanations
|
Roles
|
License needed to function
|
Communication
|
Configure Terminals - Advanced
|
Enables the complete operation on Communication menu.
|
Administrator Custom
|
Default (+ VT/ESS)
|
Communication
|
View Terminal Manager
|
Enables only the visualization of the terminals and the data collection (if the Data Collection license is active).
|
HR TerminalManager Custom
|
Default (+ VT/ESS) (+Data Collection)
|
Communication
|
Configure Terminals
|
Enables the complete definition and operation on the terminals, view/edit terminal groups, terminal configuration, result group, signals, special cards, communication queue and data collection (if the Data Collection license is active).
|
HR TerminalManager Custom
|
Default (+ VT/ESS)
|
Communication
|
APP Integration Design
|
Enables the users to design new terminal configurations.
|
Administrator Custom
|
Default + APP Design
|
Configuration
|
View VT Configuration
|
Enables only the visualization of the MC assigned for VT and Mobile.
|
HR Custom
|
Default + VT (+Mobile)
|
Configuration
|
Configure Projects Definitions
|
Enable the users to create and modify project definitions.
|
Custom
|
Projects
|
Configuration
|
Edit VT Configuration
|
Enables the assignation of the MC assigned for VT and Mobile.
|
HR Custom
|
Default + VT (+Mobile)
|
Configuration
|
View All Employees in the System, Groups and Authorization Schemes
|
Enables only the visualization of the list of employees, departments, employee groups and authorization schemes.
|
HR Custom
|
Default
|
Configuration
|
Edit All Employees in the System, Groups and Authorization Schemes
|
Enables only the visualization of the list of employees if alone, and the complete definition and operation of all employees in the system in combination with Edit Employees Core Definitions, Edit Employees Schedule Definitions, Edit Employees Personal Information, Edit Employees Sensitive Information. It also enables the complete definition and operation in departments, employee groups and authorization schemes. For adding new employees/importing employees you need this permission in combination with at least Edit Employees Core Definitions and Edit Employees Schedule Definitions!
|
HR Custom
|
Default
|
Configuration
|
Chat
|
Enables the chat on mobile application.
|
Custom
|
Default
|
Configuration
|
Configure Notifications
|
Enables users to define and receive custom notifications.
|
Custom
|
Default + Notifications
|
Configuration
|
View Employees in Teams
|
Enables only the visualization of the list of employees in the user's team. This works only if the user is manager.
|
HR Custom
|
Default
|
Configuration
|
Edit Employees in Teams
|
Enables the complete definition and operation of the employees in the user's team, but only in combination with Edit Employees Core Definitions, Edit Employees Schedule Definitions, Edit Employees Personal Information, Edit Employees Sensitive Information. This works only if the user is manager.
|
HR Custom
|
Default
|
Configuration
|
View Employees Core Definitions
|
Enables only the visualization of the Identification definition part in Employees - Edit - tab System, tab Teams, tab Free items, tab Holiday and tab Bio distribution for each employee defined. It works only in combination with View All Employees in the System, Groups and Authorization Schemes.
|
HR Custom
|
Default
|
Configuration
|
Edit Employees Core Definitions
|
Enables editing the Identification definition part in Employees - Edit - tab System, tab Teams, tab Free items, tab Holiday and tab Bio distribution for each employee defined. It works only in combination with Edit All Employees in the System, Groups and Authorization Schemes.
|
HR Custom
|
Default
|
Configuration
|
View Employees Schedule Definitions
|
Enables only the visualization of the Calculation definition part (cycle, pay group, chop group) in Employees - Edit - tab System for each employee defined. It works only in combination with View All Employees in the System, Groups and Authorization Schemes.
|
HR Custom
|
Default
|
Configuration
|
Edit Employees Schedule Definitions
|
Enables editing the Calculation definition part (cycle, pay group, chop group) in Employees - Edit - tab System for each employee defined. It works only in combination with Edit All Employees in the System, Groups and Authorization Schemes.
|
HR Custom
|
Default
|
Configuration
|
View Employees Personal Information
|
Enables only the visualization of the tab Personal Info in Employees - Edit for each employee defined (without Sensitive information). It works only in combination with View All Employees in the System, Groups and Authorization Schemes.
|
HR Custom
|
Default
|
Configuration
|
Edit Employees Personal Information
|
Enables editing the tab Personal Info in Employees - Edit for each employee defined (without Sensitive information). It works only in combination with Edit All Employees in the System, Groups and Authorization Schemes.
|
HR Custom
|
Default
|
Configuration
|
View Employees Sensitive Information
|
Enables only the visualization of the Sensitive information in tab Personal Info in Employees - Edit for each employee defined. It works only in combination with View All Employees in the System, Groups and Authorization Schemes.
|
HR Custom
|
Default
|
Configuration
|
Edit Employees Sensitive Information
|
Enables editing the Sensitive information in tab Personal Info in Employees - Edit for each employee defined. It works only in combination with Edit All Employees in the System, Groups and Authorization Schemes.
|
HR Custom
|
Default
|
Configuration
|
Add Team Counters Correction
|
Enables the possibility of making corrections on daily or periodic counters. This works only in Team Manager, so the Manager role is needed.
|
HR Custom
|
Default + MSS
|
Configuration
|
View Employee Schedule Configuration
|
Enables only the visualization of schedule configuration menus and definitions: day programs, pay groups, cycles, break groups, overtime groups, chop groups, rounding groups, autoDP table, counter definitions, counter operations, master codes and cost centers. It also enables viewing the definition maintenance.
|
HR Custom
|
Default
|
Configuration
|
Edit Employee Schedule Configuration
|
Enables editing the schedule configuration menus and definitions: day programs, pay groups, cycles, break groups, overtime groups, chop groups, rounding groups, autoDP table, counter definitions, counter operations, master codes and cost centers. It also enables viewing the definition maintenance.
|
HR Custom
|
Default
|
Configuration
|
View Absence Configuration
|
Enables only the visualization of absence related definitions: groups, absences, seniority schemes, holiday settings, counter definitions and master codes. It also enables viewing the definition maintenance.
|
HR Custom
|
Default
|
Configuration
|
Edit Absence Configuration
|
Enables editing the absence related definitions: groups, absences, seniority schemes, holiday settings, counter definitions and master codes. It also enables viewing the definition maintenance.
|
HR Custom
|
Default
|
Configuration
|
View HR Curriculum
|
Enables only the visualization of HR Curriculum and Professional sections in Employees. This works only with HR1 license.
|
HR Custom
|
Default + HR
|
Configuration
|
Edit HR Curriculum
|
Enables editing the HR Curriculum and Professional sections in Employees. This works only with HR1 license.
|
HR Custom
|
Default + HR
|
Configuration
|
View EWTD Counters
|
Enables only the visualisation of EWTD counters. This works only with EWTD license.
|
HR Custom
|
Default + EWTD
|
Configuration
|
Edit EWTD Counters
|
Enables linking the EWTD counters. This works only with EWTD license.
|
HR Custom
|
Default + EWTD
|
Configuration
|
APP Integration Design
|
Enables users to add and edit new terminal configurations.
|
Admin Custom
|
Default + App Integration Run + Design
|
Exports
|
Configure Exports
|
Enables the configuration of exports.
|
HR Custom
|
MSS + Export (+ VT/ESS)
|
Exports
|
Run Team Exports
|
Enables the managers to run the export configurations assigned only for members from their teams.
|
Manager Custom
|
MSS + Export (+ VT/ESS)
|
Exports
|
Run Company Exports
|
Enables the users to run the export configurations assigned for all employees.
|
HR Custom
|
Default + Export (+ VT/ESS)
|
GS Door Web
|
Configure GS Terminals - Advanced
|
Enables users to configure GS terminals in advanced mode.
|
Administrator Custom
|
Default + Access
|
HR Configuration
|
Edit HR Configuration
|
Enables the editing the definitions in HR definitions.
|
HR Custom
|
Default + HR
|
Operations
|
Access Mobile ESS
|
Enables the users to access ESS functionality on mobile application. This is required to access mobile ESS!
|
Custom
|
ESS + Astrow Mobile
|
Operations
|
Access Mobile MSS
|
Enables the users to access MSS functionality on mobile application. This is required to access mobile MSS!
|
Custom
|
MSS + Astrow Mobile
|
Operations
|
Access Mobile VT
|
Enables the users to access VT functionality on mobile application. This is required to access mobile VT!
|
Custom
|
VT + Astrow Mobile
|
Operations
|
Add Data Collection Request
|
Enable users to add data collection requests.
|
ESSUser
|
ESS + Data Collection
|
Operations
|
Bulk Documents Upload
|
Enables the users to upload documents for employees (e.g. payslips).
|
HR Custom
|
Default
|
Operations
|
Start Roll Call
|
Enables the users to start the roll call for emergency situations.
|
Custom
|
PIP mobile
|
Operations
|
Data Collection Mobile
|
Enables the users to use data collection on mobile.
|
Custom
|
Data Collection
|
Operations
|
Edit Frozen Employee Period
|
Enables the users to operate on already frozen periods. Therefore, even though frozen, users with this permission can still operate on those periods.
|
HR Custom
|
Default
|
Operations
|
Freeze Employee Period
|
Enables the users to freeze employee periods.
|
HR Custom
|
Default
|
Operations
|
Manager Visitor Check-In
|
Enables the managers to add visitors from the Occupancy Monitor.
|
Custom
|
MSS + Visitors + Occupancy Monitor
|
Operations
|
View All Employees in Occupancy Monitor
|
Enables the managers to see if other employees from other teams have reservations on managed sites.
|
Custom
|
MSS + Occupancy Monitor
|
Operations
|
View All Visitors in Occupancy Monitor
|
Enables the managers to see all visitors at the premises, from all company sites and for all contacts.
|
Custom
|
MSS + Visitors + Occupancy Monitor
|
Operations
|
Use VT
|
Enables the VT.
|
VTUser Custom
|
Default + VT system permission
|
Operations
|
Use mobile VT application
|
Enables the VT mobile application.
|
MobileVTUser Custom
|
Default + Mobile system permission
|
Operations
|
Add Absence Requests
|
Enables the users to add absence requests.
|
ESSUser Custom
|
ESS system permission
|
Operations
|
Add Booking Requests
|
Enables the users to add booking requests.
|
ESSUser Custom
|
ESS
|
Operations
|
Manager Pay Period Confirm
|
Enables the managers if their employees periods are checked.
|
Manager Custom
|
MSS system permission
|
Operations
|
Add Site Reservation Requests
|
Enables the employees / ESS users can add reservation requests.
|
ESSUser Custom
|
ESS + Occupancy Monitor
|
Operations
|
View Occupancy Monitor
|
Enables the managers to operate in Occupancy Monitor.
|
Manager Custom
|
MSS + Occupancy Monitor
|
Operations
|
Employee Pay Period Confirm
|
Enables the employees to confirm if their period is checked.
|
ESSUser Custom
|
ESS system permission
|
Operations
|
Assign Deputy Person
|
Enables the managers/authorizers to assign a deputy persons to manage operations in their absence.
|
Manager/Autorizer
|
MSS or ESS
|
Operations
|
Department Registration Manager Edit
|
Enables the managers to split time counter values per departments for their team.
|
Manager Custom
|
MSS + Department Registration
|
Operations
|
Department Registration Edit
|
Enables the users to split time counter values per departments for their own.
|
ESSUser Custom
|
ESS + Department Registration
|
Operations
|
Self Edit Bookings
|
Enables the users to add/edit their own bookings in their time card.
|
TrustedUser Custom
|
Default + ESS
|
Operations
|
Self Change Schedule
|
Enables the users to change their own day programs in time card and also cycle in yearly view (with permission Yearly Personal View).
|
TrustedUser Custom
|
Default + ESS
|
Operations
|
Self Edit Absences
|
Enables the users to add/edit absences in their time card and in yearly view (with permission Yearly Personal View).
|
TrustedUser Custom
|
Default + ESS
|
Operations
|
Create Job Swap Requests
|
Enables the users to create job swap requests from Astrow Mobile
|
ESSUser
|
Job Swap + ESS + Astrow Mobile
|
Operations
|
Authorize Job Swap Requests
|
Enables the managers to authorize job swap requests
|
Manager
|
Job Swap + MSS + Astrow Mobile
|
Operations
|
Self Authorize MCs
|
Enable the users to add MCs in their time card.
|
TrustedUser Custom
|
Default + ESS
|
Operations
|
Team Edit Bookings
|
Enables the managers to add/edit bookings for their teams.
|
Manager Custom
|
MSS
|
Operations
|
Team Change Schedule
|
Enables the managers to change the day programs and cycles for their teams.
|
Manager Custom
|
MSS
|
Operations
|
Team Edit Absences
|
Enables the managers to add/edit absences for their teams.
|
Manager Custom
|
MSS
|
Operations
|
Team Edit Bookings MC
|
Enables the managers to add/edit bookings MC for their teams.
|
Manager Custom
|
MSS
|
Operations
|
Team Edit Bookings CC
|
Enables the managers to add/edit bookings CC for their teams.
|
Manager Custom
|
MSS
|
Operations
|
Team Edit Notes
|
Enables the managers to add/edit notes for their teams.
|
Manager
|
MSS
|
Operations
|
Authorize Team Bookings
|
Enable users/managers to authorize booking requests for their team;
|
Manager
|
MSS
|
Operations
|
Authorize Team Data Collection
|
Enable users/managers to authorize data collection requests for their team;
|
Manager
|
MSS
|
Operations
|
Authorize Team MCs
|
Enables the managers to authorize bookings MC for their teams.
|
Manager Custom
|
MSS
|
Operations
|
Authorize Reservation Requests
|
Enables the managers to add and authorize reservation requests for their team(s).
|
Manager Custom
|
MSS + Occupancy Monitor
|
Operations
|
Authorize Personal Data Change
|
Enable the users to authorize personal data changes (GDPR)
|
HR
|
Default
|
Operations
|
Authorize Absence Requests
|
Enables the users to authorize absence requests for all employees who have linked the authorization scheme they are authorizers for.
|
Authorizer Custom
|
Default + ESS system permission
|
Operations
|
View Personal Timecard
|
Enables the users to view their time card.
|
ESSUser Custom
|
Default + ESS
|
Operations
|
Yearly Personal View
|
Enables the users to view their yearly personal situation.
|
ESSUser Custom
|
Default + ESS
|
Operations
|
Create/Execute Schedules
|
Enables the users to operate with task scheduler.
|
HR Custom
|
Default (+ VT/ESS)
|
Operations
|
View Private Employee Documents
|
Enables the users to view and download private documents.
|
HR Custom
|
Default (+ VT/ESS)
|
Operations
|
Employee Add Notes
|
Enables the employees to add their notes.
|
Employee
|
Default +ESS
|
Operations
|
View Charts
|
Enables the users to see the charts.
|
Manager
|
Default + (Charts)
|
Operations
|
Mobile Project Bookings
|
Allows Astrow Mobile users to add project bookings.
|
Custom
|
Default + VT + Projects + Astrow Mobile
|
Operations
|
Add Project Time
|
Allows users to add project time for projects
|
Custom
|
Projects
|
Operations
|
End/Cancel Roll Call
|
Allows users to end/cancel a roll call even if not started by them
|
Custom
|
Default + PIP Mobile
|
Operations
|
Allow API to connect to Astrow
|
This is for running and operating in AstrowIOService. The user must be assigned this permission to run API.
|
Custom
|
Default
|
Reports
|
Run HR Reports
|
Enables the users to run the HR configurations assigned.
|
HR Custom
|
Default + HR
|
Reports
|
Configure HR Reports
|
Enables the users to configure the HR reports.
|
HR Custom
|
Default + HR
|
Reports
|
Run Bradford Factor
|
Enables the users to run Bradford Factor.
|
MSS Custom
|
Default + Bradford Factor
|
Reports
|
Run/Configure Team Reports
|
Enables the managers to configure and run reports only for members from their teams.
|
MSS Custom
|
Default (+Illness)
|
Reports
|
Run/Configure Company Reports
|
Enables the users to configure and run reports for all employees.
|
HR Custom
|
Default (+Illness)
|
Security
|
View Security
|
Enables the users to view the definitions for other users, also roles and permissions.
|
HR Administrator Custom
|
Default (+ VT/ESS)
|
Security
|
Edit Security
|
Enables the users to create the definitions for other users, also roles and permissions.
|
HR Administrator Custom
|
Default (+ VT/ESS)
|
Security
|
Tools
|
Enables only the visualization of failed notifications, services status and application log in Tools menu.
|
HR Administrator Custom
|
Default (+ VT/ESS)
|
Security
|
Reset Users Password
|
Enables the users to reset the password of other users in Security - Users.
|
HR Administrator Custom
|
Default (+ VT/ESS)
|
Settings
|
View Preferences
|
Enables the users to view preferences.
|
HR ESS RunReportsExports Manager Custom
|
Default (+ VT/ESS)
|
Settings
|
Edit Preferences
|
Enables the users to edit preferences.
|
HR ESS RunReportsExports Manager Custom
|
Default (+ VT/ESS)
|
Settings
|
View System Settings
|
Enables the users to view system settings.
|
HR Administrator Custom
|
Default (+ VT/ESS)
|
Settings
|
Edit System Settings
|
Enables the users to edit system settings.
|
HR Administrator Custom
|
Default (+ VT/ESS)
|
View
|
View Dashboard
|
Enables the users to see the dashboard. It displays the information correlated to the rest of permissions.
|
HR Manager Custom
|
Default (+ VT/ESS)
|
View
|
View Teammates Group
|
Enables the users to see if their colleagues are on holiday. This functionality is for the employees to plan their holidays.
|
ESSUser
|
Default + ESS
|
View
|
View Team Manager
|
Enables the managers to operate in team manager. This is functional with all the permissions related Manager role.
|
Manager
|
MSS system permission
|
View
|
Run Custom Reports/Exports
|
Enables the users to run reports/exports executions assigned by others. This will consume an extra MSS license.
|
RunReportsExports
|
MSS (+ Export) system permission
|
View
|
View Messages
|
Enables the users to view messages.
|
HR Administration Employee Custom
|
Default + ESS
|
View
|
Create Messages
|
Enables the users to post messages.
|
HR Administration Custom
|
Default + ESS
|
View
|
View Holiday Card
|
Enables the users to view their holiday card.
|
ESSUser Custom
|
Default + ESS
|
View
|
View Contact and Version Information
|
Enables the users to see contact information.
|
HR Custom
|
Default (+ VT/ESS)
|
View
|
View Team PIP
|
Enables the managers to view PIP for their teams. This works only in combination with Manager role.
|
Manager Custom
|
Default + PIP
|
View
|
View PIP Details
|
Enables the users to access the daily view information from PIP. This works only in combination with View Team PIP or View PIP Public. In combination with other management editing permissions, operations are also possible.
|
HR Manager Custom
|
Default + PIP (+ VT/ESS)
|
View
|
View PIP Public
|
Enables the users to see PIP for all employees.
|
HR Custom
|
Default + PIP (+ VT/ESS)
|
View
|
View Pocket PIP
|
Enables the users to see Pocket PIP.
|
HR Custom
|
Default + Pocket PIP
|
View
|
View Pocket PIP Public
|
Enables the users to see Pocket PIP public.
|
HR Custom
|
Default + Pocket PIP
|
View
|
View Notes in PIP
|
Enables the users to see the notes of other users from PIP view.
|
HR Custom
|
Default + PIP (+ PIP mobile) + ESS
|
View
|
View Anomalies
|
Enables managers to see the anomalies for their teams. This works only in combination with Manager role.
|
Manager Custom
|
Default + PIP (+ PIP mobile)
|
View
|
View Own Anomalies
|
Enables the users to see their anomalies.
|
ESSUser
|
Default + ESS
|
View
|
View Operation Log
|
Enables the view of operation log.
|
HR Custom
|
Default + Detailed log (+ VT/ESS)
|
View
|
Visitors List
|
Enables users to see visitors list.
|
HR Custom
|
Defalut + Visitors registration (print)
|