List of Permissions

 
A classification of all permissions used in Astrow Web with explanations can be found below. System permissions cannot be customized and they consume licenses. The rest of the permissions work if they can find the licenses mentioned in the right column of the table below.
 
*License needed to function - bold means the permission consumes 1 license!
 
Menu
Permission
Explanations
Roles
License needed to function
Communication
Configure Terminals - Advanced
Enables the complete operation on Communication menu.
Administrator Custom
Default (+ VT/ESS) 
Communication
View Terminal Manager
Enables only the visualization of the terminals and the data collection (if the Data Collection license is active).
HR TerminalManager Custom
Default (+ VT/ESS) (+Data Collection) 
Communication
Configure Terminals
Enables the complete definition and operation on the terminals, view/edit terminal groups, terminal configuration, result group, signals, special cards, communication queue and data collection (if the Data Collection license is active).
HR TerminalManager Custom
Default (+ VT/ESS) 
Communication
APP Integration Design
Enables the users to design new terminal configurations.
Administrator Custom
Default + APP Design
Configuration
View VT Configuration
Enables only the visualization of the MC assigned for VT and Mobile.
HR Custom
Default + VT (+Mobile)
Configuration
Configure Projects Definitions
Enable the users to create and modify project definitions.
Custom
Projects
Configuration
Edit VT Configuration
Enables the assignation of the MC assigned for VT and Mobile.
HR Custom
Default + VT (+Mobile)
Configuration
View All Employees in the System, Groups and Authorization Schemes
Enables only the visualization of the list of employees, departments, employee groups and authorization schemes.
HR Custom
Default
Configuration
Edit All Employees in the System, Groups and Authorization Schemes
Enables only the visualization of the list of employees if alone, and the complete definition and operation of all  employees in the system in combination with Edit Employees Core Definitions, Edit Employees Schedule Definitions, Edit Employees Personal Information, Edit Employees Sensitive Information. It also enables the complete definition and operation in departments, employee groups and authorization schemes. For adding new employees/importing employees you need this permission in combination with at least Edit Employees Core Definitions and Edit Employees Schedule Definitions!
HR Custom
Default 
Configuration
Chat
Enables the chat on mobile application.
Custom
Default
Configuration
Configure Notifications
Enables users to define and receive custom notifications.
Custom
Default + Notifications
Configuration
View Employees in Teams
Enables only the visualization of the list of employees in the user's team. This works only if the user is manager.
HR Custom
Default
Configuration
Edit Employees in Teams
Enables the complete definition and operation of the employees in the user's team, but only in combination with Edit Employees Core Definitions, Edit Employees Schedule Definitions, Edit Employees Personal Information, Edit Employees Sensitive Information. This works only if the user is manager.
HR Custom
Default
Configuration
View Employees Core Definitions
Enables only the visualization of the Identification definition part in Employees - Edit - tab System, tab Teams, tab Free items, tab Holiday and tab Bio distribution for each employee defined. It works only in combination with View All Employees in the System, Groups and Authorization Schemes.
HR Custom
Default
Configuration
Edit Employees Core Definitions
Enables editing the Identification definition part in Employees - Edit - tab System, tab Teams, tab Free items, tab Holiday and tab Bio distribution for each employee defined. It works only in combination with Edit All Employees in the System, Groups and Authorization Schemes.
HR Custom
Default
Configuration
View Employees Schedule Definitions
Enables only the visualization of the Calculation definition part (cycle, pay group, chop group) in Employees - Edit - tab System for each employee defined. It works only in combination with View All Employees in the System, Groups and Authorization Schemes.
HR Custom
Default
Configuration
Edit Employees Schedule Definitions
Enables editing the Calculation definition part (cycle, pay group, chop group) in Employees - Edit - tab System for each employee defined. It works only in combination with Edit All Employees in the System, Groups and Authorization Schemes.
HR Custom
Default
Configuration
View Employees Personal Information
Enables only the visualization of the tab Personal Info in Employees - Edit for each employee defined (without Sensitive information). It works only in combination with View All Employees in the System, Groups and Authorization Schemes.
HR Custom
Default
Configuration
Edit Employees Personal Information
Enables editing the tab Personal Info in Employees - Edit for each employee defined (without Sensitive information). It works only in combination with Edit All Employees in the System, Groups and Authorization Schemes.
HR Custom
Default
Configuration
View Employees Sensitive Information
Enables only the visualization of the Sensitive information in tab Personal Info in Employees - Edit for each employee defined. It works only in combination with View All Employees in the System, Groups and Authorization Schemes.
HR Custom
Default
Configuration
Edit Employees Sensitive Information
Enables editing the Sensitive information in tab Personal Info in Employees - Edit for each employee defined. It works only in combination with Edit All Employees in the System, Groups and Authorization Schemes.
HR Custom
Default
Configuration
Add Team Counters Correction
Enables the possibility of making corrections on daily or periodic counters. This works only in Team Manager, so the Manager role is needed.
HR Custom
Default + MSS
Configuration
View Employee Schedule Configuration
Enables only the visualization of schedule configuration menus and definitions: day programs, pay groups, cycles, break groups, overtime groups, chop groups, rounding groups, autoDP table, counter definitions, counter operations, master codes and cost centers. It also enables viewing  the definition maintenance.
HR Custom
Default
Configuration
Edit Employee Schedule Configuration
Enables editing the schedule configuration menus and definitions: day programs, pay groups, cycles, break groups, overtime groups, chop groups, rounding groups, autoDP table, counter definitions, counter operations, master codes and cost centers. It also enables viewing the definition maintenance.
HR Custom
Default
Configuration
View Absence Configuration
Enables only the visualization of absence related definitions: groups, absences, seniority schemes, holiday settings, counter definitions and master codes. It also enables viewing the definition maintenance.
HR Custom
Default
Configuration
Edit Absence Configuration
Enables editing the absence related definitions: groups, absences, seniority schemes, holiday settings, counter definitions and master codes. It also enables viewing the definition maintenance.
HR Custom
Default
Configuration
View HR Curriculum
Enables only the visualization of HR Curriculum and Professional sections in Employees. This works only with HR1 license.
HR Custom
Default + HR
Configuration
Edit HR Curriculum
Enables editing the HR Curriculum and Professional sections in Employees. This works only with HR1 license.
HR Custom
Default + HR
Configuration
View EWTD Counters
Enables only the visualisation of EWTD counters. This works only with EWTD license.
HR Custom
Default + EWTD
Configuration
Edit EWTD Counters
Enables linking the EWTD counters. This works only with EWTD license.
HR Custom
Default + EWTD
Configuration
APP Integration Design
Enables users to add and edit new terminal configurations.
Admin Custom
Default + App Integration Run + Design
Exports
Configure Exports
Enables the configuration of exports.
HR Custom
MSS + Export (+ VT/ESS)
Exports
Run Team Exports
Enables the managers to run the export configurations assigned only for members from their teams.
Manager Custom
MSS + Export (+ VT/ESS)
Exports
Run Company Exports
Enables the users to run the export configurations assigned for all employees.
HR Custom
Default + Export (+ VT/ESS)
GS Door Web
Configure GS Terminals - Advanced
Enables users to configure GS terminals in advanced mode.
Administrator Custom
Default + Access
HR Configuration
Edit HR Configuration
Enables the editing the definitions in HR definitions.
HR Custom
Default + HR
Operations
Access Mobile ESS
Enables the users to access ESS functionality on mobile application. This is required to access mobile ESS!
Custom
ESS + Astrow Mobile
Operations
Access Mobile MSS
Enables the users to access MSS functionality on mobile application. This is required to access mobile MSS!
Custom
MSS + Astrow Mobile
Operations
Access Mobile VT
Enables the users to access VT functionality on mobile application. This is required to access mobile VT!
Custom
VT + Astrow Mobile
Operations
Add Data Collection Request
Enable users to add data collection requests.
ESSUser
ESS + Data Collection
Operations
Bulk Documents Upload
Enables the users to upload documents for employees (e.g. payslips).
HR Custom
Default
Operations
Start Roll Call
Enables the users to start the roll call for emergency situations.
Custom
PIP mobile
Operations
Data Collection Mobile
Enables the users to use data collection on mobile.
Custom
Data Collection
Operations
Edit Frozen Employee Period
Enables the users to operate on already frozen periods. Therefore, even though frozen, users with this permission can still operate on those periods.
HR Custom
Default
Operations
Freeze Employee Period
Enables the users to freeze employee periods.
HR Custom
Default
Operations
Manager Visitor Check-In
Enables the managers to add visitors from the Occupancy Monitor.
Custom
MSS + Visitors + Occupancy Monitor
Operations
View All Employees in Occupancy Monitor
Enables the managers to see if other employees from other teams have reservations on managed sites.
Custom
MSS + Occupancy Monitor
Operations
View All Visitors in Occupancy Monitor
Enables the managers to see all visitors at the premises, from all company sites and for all contacts.
Custom
MSS + Visitors + Occupancy Monitor
Operations
Use VT
Enables the VT.
VTUser Custom
Default + VT system permission
Operations
Use mobile VT application
Enables the VT mobile application.
MobileVTUser Custom
Default + Mobile system permission
Operations
Add Absence Requests
Enables the users to add absence requests.
ESSUser Custom
ESS system permission
Operations
Add Booking Requests
Enables the users to add booking requests.
ESSUser Custom
ESS
Operations
Manager Pay Period Confirm
Enables the managers if their employees periods are checked.
Manager Custom
MSS system permission
Operations
Add Site Reservation Requests
Enables the employees / ESS users can add reservation requests.
ESSUser Custom
ESS + Occupancy Monitor
Operations
View Occupancy Monitor
Enables the managers to operate in Occupancy Monitor.
Manager Custom
MSS + Occupancy Monitor
Operations
Employee Pay Period Confirm
Enables the employees to confirm if their period is checked.
ESSUser Custom
ESS system permission
Operations
Assign Deputy Person
Enables the managers/authorizers to assign a deputy persons to manage operations in their absence.
Manager/Autorizer
MSS or ESS
Operations
Department Registration Manager Edit
Enables the managers to split time counter values per departments for their team.
Manager Custom
MSS + Department Registration
Operations
Department Registration Edit
Enables the users to split time counter values per departments for their own.
ESSUser Custom
ESS + Department Registration
Operations
Self Edit Bookings
Enables the users to add/edit their own bookings in their time card.
TrustedUser Custom
Default + ESS 
Operations
Self Change Schedule
Enables the users to change their own day programs in time card and also cycle in yearly view (with permission Yearly Personal View).
TrustedUser Custom
Default + ESS   
Operations
Self Edit Absences
Enables the users to add/edit absences in their time card and in yearly view (with permission Yearly Personal View).
TrustedUser Custom
Default + ESS
Operations
Create Job Swap Requests
Enables the users to create job swap requests from Astrow Mobile
ESSUser
Job Swap + ESS + Astrow Mobile
Operations
Authorize Job Swap Requests
Enables the managers to authorize job swap requests
Manager
Job Swap + MSS + Astrow Mobile
Operations
Self Authorize MCs
Enable the users to add MCs in their time card.
TrustedUser Custom
Default + ESS 
Operations
Team Edit Bookings
Enables the managers to add/edit bookings for their teams.
Manager Custom
MSS
Operations
Team Change Schedule
Enables the managers to change the day programs and cycles for their teams.
Manager Custom
MSS
Operations
Team Edit Absences
Enables the managers to add/edit absences for their teams.
Manager Custom
MSS
Operations
Team Edit Bookings MC
Enables the managers to add/edit bookings MC for their teams.
Manager Custom
MSS
Operations
Team Edit Bookings CC
Enables the managers to add/edit bookings CC for their teams.
Manager Custom
MSS
Operations
Team Edit Notes
Enables the managers to add/edit notes for their teams.
Manager
MSS
Operations
Authorize Team Bookings
Enable users/managers to authorize booking requests for their team;
Manager
MSS
Operations
Authorize Team Data Collection
Enable users/managers to authorize data collection requests for their team;
Manager
MSS
Operations
Authorize Team MCs
Enables the managers to authorize bookings MC for their teams.
Manager Custom
MSS
Operations
Authorize Reservation Requests
Enables the managers to add and authorize reservation requests for their team(s).
Manager Custom
MSS + Occupancy Monitor
Operations
Authorize Personal Data Change
Enable the users to authorize personal data changes (GDPR)
HR
Default
Operations
Authorize Absence Requests
Enables the users to authorize absence requests for all employees who have linked the authorization scheme they are authorizers for.
Authorizer Custom
Default + ESS system permission
Operations
View Personal Timecard
Enables the users to view their time card.
ESSUser Custom
Default + ESS 
Operations
Yearly Personal View
Enables the users to view their yearly personal situation.
ESSUser Custom
Default + ESS 
Operations
Create/Execute Schedules
Enables the users to operate with task scheduler.
HR Custom
Default (+ VT/ESS)
Operations
View Private Employee Documents
Enables the users to view and download private documents.
HR Custom
Default (+ VT/ESS)
Operations
Employee Add Notes
Enables the employees to add their notes.
Employee
Default +ESS
Operations
View Charts
Enables the users to see the charts.
Manager
Default + (Charts)
Operations
Mobile Project Bookings
Allows Astrow Mobile users to add project bookings.
Custom
Default + VT + Projects + Astrow Mobile
Operations
Add Project Time
Allows users to add project time for projects
Custom
Projects
Operations
End/Cancel Roll Call
Allows users to end/cancel a roll call even if not started by them
Custom
Default + PIP Mobile
Operations
Allow API to connect to Astrow
This is for running and operating in AstrowIOService. The user must be assigned this permission to run API.
Custom
Default
Reports
Run HR Reports
Enables the users to run the HR configurations assigned.
HR Custom
Default + HR
Reports
Configure HR Reports
Enables the users to configure the HR reports.
HR Custom
Default + HR
Reports
Run Bradford Factor
Enables the users to run Bradford Factor.
MSS Custom
Default + Bradford Factor
Reports
Run/Configure Team Reports
Enables the managers to configure and run reports only for members from their teams.
MSS Custom
Default (+Illness)
Reports
Run/Configure Company Reports
Enables the users to configure and run reports for all employees.
HR Custom
Default (+Illness)
Security
View Security
Enables the users to view the definitions for other users, also roles and permissions.
HR Administrator Custom
Default (+ VT/ESS)
Security
Edit Security
Enables the users to create the definitions for other users, also roles and permissions.
HR Administrator Custom
Default (+ VT/ESS)
Security
Tools
Enables only the visualization of failed notifications, services status and application log in Tools menu.
HR Administrator Custom
Default (+ VT/ESS)
Security
Reset Users Password
Enables the users to reset the password of other users in Security - Users.
HR Administrator Custom
Default (+ VT/ESS)
Settings
View Preferences
Enables the users to view preferences.
HR ESS RunReportsExports Manager Custom
Default (+ VT/ESS)   
Settings
Edit Preferences
Enables the users to edit preferences.
HR ESS RunReportsExports Manager Custom
Default (+ VT/ESS) 
Settings
View System Settings
Enables the users to view system settings.
HR Administrator Custom
Default (+ VT/ESS)  
Settings
Edit System Settings
Enables the users to edit system settings.
HR Administrator Custom
Default (+ VT/ESS)  
View
View Dashboard
Enables the users to see the dashboard. It displays the information correlated to the rest of permissions.
HR Manager Custom
Default (+ VT/ESS)
View
View Teammates Group
Enables the users to see if their colleagues are on holiday. This functionality is for the employees to plan their holidays.
ESSUser
Default + ESS 
View
View Team Manager
Enables the managers to operate in team manager. This is functional with all the permissions related Manager role.
Manager
MSS system permission
View
Run Custom Reports/Exports
Enables the users to run reports/exports executions assigned by others. This will consume an extra MSS license.
RunReportsExports
MSS (+ Export) system permission
View
View Messages
Enables the users to view messages.
HR Administration Employee Custom
Default + ESS
View
Create Messages
Enables the users to post messages.
HR Administration Custom
Default + ESS
View
View Holiday Card
Enables the users to view their holiday card.
ESSUser Custom
Default + ESS
View
View Contact and Version Information
Enables the users to see contact information.
HR Custom
Default (+ VT/ESS)
View
View Team PIP
Enables the managers to view PIP for their teams. This works only in combination with Manager role.
Manager Custom
Default + PIP
View
View PIP Details
Enables the users to access the daily view information from PIP. This works only in combination with View Team PIP or View PIP Public. In combination with other management editing permissions, operations are also possible.
HR Manager Custom
Default + PIP (+ VT/ESS)
View
View PIP Public
Enables the users to see PIP for all employees.
HR Custom
Default + PIP (+ VT/ESS)
View
View Pocket PIP
Enables the users to see Pocket PIP.
HR Custom
Default + Pocket PIP
View
View Pocket PIP Public
Enables the users to see Pocket PIP public.
HR Custom
Default + Pocket PIP
View
View Notes in PIP
Enables the users to see the notes of other users from PIP view.
HR Custom
Default +  PIP (+ PIP mobile) + ESS
View
View Anomalies
Enables managers to see the anomalies for their teams. This works only in combination with Manager role.
Manager Custom
Default + PIP (+ PIP mobile)
View
View Own Anomalies
Enables the users to see their anomalies.
ESSUser
Default + ESS
View
View Operation Log
Enables the view of operation log.
HR Custom
Default + Detailed log (+ VT/ESS)
View
Visitors List
Enables users to see visitors list.
HR Custom
Defalut + Visitors registration (print)