System Roles
System roles are fixed roles defined in the system. System roles contain system permissions and customable permissions.
 |
System permissions cannot be deleted or modified!
|
HR
HR role has a full set of customable permissions in configuring the system and assigning roles to other users. HR can be any person with an overall view of the application. HR permissions are set, but not fixed to:
Communication
View Terminal Manager: Enable users to view terminals;
Configure Terminals: Enable users to configure terminals.
Configuration
View VT Configuration: Enable users to view virtual terminal configuration: MCs used in VT selection;
Edit VT Configuration: Enable users to edit virtual terminal configuration: MCs used in VT selection;
View All Employees in the System, Groups and Authorization Schemes: Enable users to view all employees in the system, groups and authorization schemes;
Edit All Employees in the System, Groups and Authorization Schemes: Enable users to edit all employees in the system, groups and authorization schemes;
View Employees Core Information: Enable users to view employees core information;
Edit Employees Core Information: Enable users to edit employees core information;
View Employees Schedule Definitions: Enable users to view employees schedule definitions;
Edit Employees Schedule Definitions: Enable users to edit employees schedule definitions;
View Employees Personal Information: Enable users to view employees personal information;
Edit Employees Personal Information: Enable users to edit employees personal information;
View Employees Sensitive Information: Enable users to view employees sensitive information;
Edit Employees Sensitive Information: Enable users to edit employees sensitive information;
Add Team Counters Corrections: Enable managers to add corrections of counters for their teams;
View Employees Schedule Configurations: Enable users to view items needed to configure employee schedule;
Edit Employees Schedule Configurations: Enable users to edit items needed to configure employee schedule;
View Absence Configuration: Enable users to view absence definitions;
Edit Absence Configuration: Enable users to edit items needed to configure absences;
View HR Curriculum: Enable users to view HR curriculum;
Edit HR Curriculum: Enable users to edit HR curriculum;
View EWTD Counters: Enable users to view EWTD counters;
Edit EWTD Counters: Enable users to edit EWTD counters;
Exports
Configure Exports: Enable users to create export configurations and assign them to other users;
Run Company Exports: Enable users to run exports for the whole company (all teams).
HR Configuration
Edit HR Configuration: Enable users to edit HR definitions;
Operations
Create/Execute Job Schedules: Enable users to create and execute job schedules;
Reports
Run HR Reports: Enable managers to view and create HR reports for their teams;
Configure HR Reports: Enable users to create HR reports configurations;
Run/Configure Company Reports: Enable users to run reports for whole company (all teams).
Security
View Security: Enable users to view security: users, roles and permissions;
Edit Security: Enable users to edit users and roles and assign roles and individual permissions to users;
Tools: Enable users to see system status;
Reset Users Password: Enable users to reset the password for other users.
Settings
View Preferences: Enable users to view preferences;
Edit Preferences: Enable users to edit preferences;
View System Settings: Enable users to view system settings;
Edit System Settings: Enable users to edit system settings.
View
View Dashboard: Enable users to view dashboard;
View Messages: Enable users to view received messages;
Create Messages: Enable users to post or delete messages and check / edit outbox messages;
View Contact and Version Information: Enable users to view contact information of Astrow dealer and version and license information;
View Team PIP: Enable users to view PIP;
View PIP Details: Enable users to view PIP details;
View PIP Public: Enable users to view PIP public;
View Operation Log: Enable users to view operation log.
|
|
The HR master user will by default take the role of a Manager and consume 1 MSS license. It will be assigned all employees as a system group and all new employees will be included in this system group.
|
Administrator
Administrator role has a full set of customable permissions in configuring the communication, but does not have any permission for operations. Administrator permissions are set, but not fixed to:
Communication
Configure Terminals - Advanced: Enable users to configure terminals in advance mode;
GSDoorWeb
Configure GS Terminals - Advanced: Enable users to configure GS terminals in advanced mode;
Security
View Security: Enable users to view security: users, roles and permissions;
Edit Security: Enable users to edit or delete users and roles and assign roles and individual permissions to users;
Tools: Enable users to view system status;
Reset Users Password: Enable users to reset the password for other users.
Settings
View Preferences: Enable users to view preferences;
Edit Preferences: Enable users to edit preferences;
View System Settings: Enable users to view system settings;
Edit System Settings: Enable users to edit own bookings.
View
View Messages: Enable users to view received messages;
Create Messages: Enable users to post or delete messages and check / edit outbox messages.
ESSUser
ESSUser role has a system permission set in adding absence requests, but it can be customized to suit your needs. ESSUser can be any employee in your organization. ESSUser permissions are set, but not fixed to:
Operations
Add Absence Requests (System): Enable users to add absence requests.
View Personal Timecard: Enable users to view personal timecard;
Yearly Personal View: Enable users to view personal yearly situation.
Settings
View Preferences: Enable users to view preferences;
Edit Preferences: Enable users to edit preferences.
View
View Teammates Group: Enable users to view their teammates;
View Holiday Card: Enable users to view holiday card;
View Own Anomalies: Enable users to see their own anomalies.
Authorizer
Authorizer role is defined to authorize absence requests of other users. Authorizer can be supervisor in the organization. Authorizer’s permissions are system set to:
Operations
Authorize Absence Requests (System): Enable users to grant/reject absence requests from other users.
VTUser
VTUser role is defined to add bookings using VT. VTUser can be any employee in the organization who uses VT for bookings. VTUser permissions are system set to:
Operations
Use VT (System): Enable users to make bookings using VT.
MobileVTUser
MobileVTUser role is defined to add bookings using mobile VT application. MobileVTUser can be any employee in the organization who uses mobile VT for bookings. MobileVTUser permissions are system set to:
Operations
Use mobile VT application (System): Enable users to make bookings using mobile application.
RunReportsExports
RunReportsExports role is defined to run periodically the executions of reports/exports assigned. RunReportsExports permissions are system set to:
Settings
View Preferences: Enable users to view preferences;
Edit Preferences: Enable users to edit preferences;
View
View Dashboard: Enable users to view dashboard;
Run Custom Reports/Exports (System): Enable users to run custom reports/exports.
Manager
Manager role is defined to follow-up and authorize other people’s time and attendance. Role manager can be taken by any person in the organization who leads people and needs to have an overview of their presence.
Manager permissions are system set only to operations in Team Manager, the rest set are editable:
Exports
Run Team Exports: Enable managers to run exports for their teams.
Operations
Team Edit Bookings: Enable users / managers to edit bookings of team members;
Team Change Schedule: Enable users/managers to change the day program and cycle of team members;
Team Edit Absences: Enable users / managers to edit absences of team members;
Team Edit Bookings MC: Enable users / managers to edit bookings MC for their teams;
Team Edit Bookings CC: Enable users / managers to edit bookings cost centre for their teams;
Edit Notes: Enable users to edit personal notes;
Authorize Team MCs: Enable users / managers to authorize bookings MC for their teams;
Create/Execute Job Schedules: Enable users to create and execute job schedules.
Reports
Run/Configure Team Reports: Enable managers to run and configure reports for their teams.
Settings
View Preferences: Enable users to view preferences;
Edit Preferences: Enable users to edit preferences;
View
View Dashboard: Enable users to view dashboard;
View Team Manager (System): Enable users to work with Team Manager tool;
View Team PIP: Enable users to view PIP;
View PIP Details: Enable users to view PIP details;
View anomalies: Enable users/managers to view anomalies for their team.
Activity Manager
Activity Manager role is defined for managers to register the time spent by employees per activity in the Activity Mobile application. This role can be taken by any user who is also a Manager.
Activity Manager permissions are system set only to operations in Activity Mobile application, the rest set are editable:
Operations
Use Mobile Activity Application (System): Enable users / managers to use mobile Activity application.