System Roles

System roles are fixed roles defined in the system. System roles contain system permissions and customizable permissions.

System permissions cannot be deleted or modified!

HR

HR role has a full set of customizable permissions in configuring the system and assigning roles to other users. HR can be any person with an overall view of the application. HR permissions are set, but not fixed to:

Communication

View Terminal Manager: Enable users to view terminals;

Configure Terminals: Enable users to configure terminals.

Configuration

View VT Configuration: Enable users to view virtual terminal configuration: MCs used in VT selection;

Edit VT Configuration: Enable users to edit virtual terminal configuration: MCs used in VT selection;

View All Employees in the System, Groups and Authorization Schemes: Enable users to view all employees in the system, groups and authorization schemes;

Edit All Employees in the System, Groups and Authorization Schemes: Enable users to edit all employees in the system, groups and authorization schemes;

View Employees Core Information: Enable users to view employees core information;

Edit Employees Core Information: Enable users to edit employees core information;

View Employees Schedule Definitions: Enable users to view employees schedule definitions;

Edit Employees Schedule Definitions: Enable users to edit employees schedule definitions;

View Employees Personal Information: Enable users to view employees personal information;

Edit Employees Personal Information: Enable users to edit employees personal information;

View Employees Sensitive Information: Enable users to view employees sensitive information;

Edit Employees Sensitive Information: Enable users to edit employees sensitive information;

Add Team Counters Corrections: Enable managers to add corrections of counters for their teams;

View Employees Schedule Configurations: Enable users to view items needed to configure employee schedule;

Edit Employees Schedule Configurations: Enable users to edit items needed to configure employee schedule;

View Absence Configuration: Enable users to view absence definitions;

Edit Absence Configuration: Enable users to edit items needed to configure absences;

View HR Curriculum: Enable users to view HR curriculum;

Edit HR Curriculum: Enable users to edit HR curriculum;

View EWTD Counters: Enable users to view EWTD counters;

Edit EWTD Counters: Enable users to edit EWTD counters;

Exports

Configure Exports: Enable users to create export configurations and assign them to other users;

Run Company Exports: Enable users to run exports for the whole company (all teams).

HR Configuration

Edit HR Configuration: Enable users to edit HR definitions;

Operations

Bulk Documents Upload: Enable users to upload multiple documents for employees;

Edit Frozen Employee Period: Enable users to operate on already frozen periods;

Employee Contract: Enable users to edit employee contract definition;

Freeze Employee Period: Enable users to freeze employee period;

Authorize Persona Data Change: Enable users/managers to authorize personal data change request;

Create/Execute Job Schedules: Enable users to create and execute job schedules;

View Private Employee Documents: Enable users to view and download private documents.

Reports

Run HR Reports: Enable managers to view and create HR reports for their teams;

Configure HR Reports: Enable users to create HR reports configurations;

Run/Configure Company Reports: Enable users to run reports for whole company (all teams).

Security

View Security: Enable users to view security: users, roles and permissions;

Edit Security: Enable users to edit users and roles and assign roles and individual permissions to users;

Tools: Enable users to see system status;

Reset Users Password: Enable users to reset the password for other users.

Settings

View Preferences: Enable users to view preferences;

Edit Preferences: Enable users to edit preferences;

View System Settings: Enable users to view system settings;

Edit System Settings: Enable users to edit system settings.

View

View Dashboard: Enable users to view dashboard;

View Messages: Enable users to view received messages;

Create Messages: Enable users to post or delete messages and check / edit outbox messages;

View Contact and Version Information: Enable users to view contact information of Astrow dealer and version and license information;

View Team PIP: Enable users to view PIP;

View Pocket PIP: Enable users to view Pocket PIP / Astrow Mobile PIP;

View Pocket PIP Public: Enable users to view Pocket PIP / Astrow Mobile PIP public;

View PIP Details: Enable users to view PIP details;

View PIP Public: Enable users to view PIP public;

View Operation Log: Enable users to view operation log;

View Visitors List: Enable users to see visitors list.

The HR master user will by default take the role of a Manager and consume 1 MSS license. It will be assigned All employees (System) as a system group and all new employees will be included in this system group.

Administrator

Administrator role has a full set of customizable permissions in configuring the communication, but does not have any permission for operations. Administrator permissions are set, but not fixed to:

Communication

Configure Terminals - Advanced: Enable users to configure terminals in advance mode;

APP Integration Design: Enable users to edit APP configurations.

GSDoorWeb

Configure GS Terminals - Advanced: Enable users to configure GS terminals in advanced mode;

Security

View Security: Enable users to view security: users, roles and permissions;

Edit Security: Enable users to edit or delete users and roles and assign roles and individual permissions to users;

Tools: Enable users to view system status;

Reset Users Password: Enable users to reset the password for other users.

Settings

View Preferences: Enable users to view preferences;

Edit Preferences: Enable users to edit preferences;

View System Settings: Enable users to view system settings;

Edit System Settings: Enable users to edit own bookings.

View

View Messages: Enable users to view received messages;

Create Messages: Enable users to post or delete messages and check / edit outbox messages.

ESSUser

ESSUser role has a system permission set in adding absence requests, but it can be customized to suit your needs. ESSUser can be any employee in your organization. ESSUser permissions are set, but not fixed to:

Operations

Add Absence Requests (System): Enable users to add absence requests;

Add Booking Requests: Enable users to add booking requests;

Employee Pay Period Confirm: Enable employees to confirm if their pay period is complete;

Add Site Reservation Requests: Enable users to add site reservation requests;

Add Data Collection Request: Enable users to add data collection requests;

Department Registration Edit: Enable users to self add/edit department registration values;

View Personal Timecard: Enable users to view personal timecard;

Yearly Personal View: Enable users to view personal yearly situation.

Settings

View Preferences: Enable users to view preferences;

Edit Preferences: Enable users to edit preferences.

View

View Teammates Group: Enable users to view their teammates;

View Holiday Card: Enable users to view holiday card;

View Own Anomalies: Enable users to see their own anomalies;

Personal Data (System): Enable users to see their stored curriculum data.

Authorizer

Authorizer role is defined to authorize absence requests of other users. Authorizer can be supervisor in the organization. Authorizer’s permissions are system set to:

Operations

Assign Deputy Person: Enable users to assign a deputy person.

Authorize Absence Requests (System): Enable users to grant/reject absence requests from other users.

VTUser

VTUser role is defined to add bookings using VT. VTUser can be any employee in the organization who uses VT for bookings. VTUser permissions are system set to:

Operations

Use VT (System): Enable users to make bookings using VT.

WebMobileVTUser

(DISCONTINUED - please do not assign if you use Astrow Mobile!)

MobileVTUser role is defined to add bookings using mobile VT application (DISCONTINUED). MobileVTUser can be any employee in the organization who uses mobile VT for bookings. MobileVTUser permissions are system set to:

Operations

Use mobile VT application (System): Enable users to make bookings using mobile application.

RunReportsExports

RunReportsExports role is defined to run periodically the executions of reports/exports assigned. RunReportsExports permissions are system set to:

Settings

View Preferences: Enable users to view preferences;

Edit Preferences: Enable users to edit preferences;

View

View Dashboard: Enable users to view dashboard;

Run Custom Reports/Exports (System): Enable users to run custom reports/exports.

Manager

Manager role is defined to follow-up and authorize other people’s time and attendance. Role manager can be taken by any person in the organization who leads people and needs to have an overview of their presence.

Manager permissions are system set only to operations in Team Manager, the rest set are editable:

Exports

Run Team Exports: Enable managers to run exports for their teams.

Operations

Department Registration Manager Edit: Enable managers to add/edit department registration values for their team;

Assign Deputy Person: Enable users to assign a deputy person;

Manage Pay Period Confirm: Enable managers to confirm if their employees periods are complete;

View Occupancy Monitor: Enable managers to view the Occupancy Monitor;

Team Edit Bookings: Enable users / managers to edit bookings of team members;

Team Change Schedule: Enable users/managers to change the day program and cycle of team members;

Team Edit Absences: Enable users / managers to edit absences of team members;

Team Edit Bookings MC: Enable users / managers to edit bookings MC for their teams;

Team Edit Bookings CC: Enable users / managers to edit bookings cost centre for their teams;

Team Edit Notes: Enable users to edit personal notes;

Authorize Team Bookings: Enable users/managers to authorize booking requests for their team;

Authorize Team Data Collection: Enable users/managers to authorize data collection requests for their team;

Authorize Team MCs: Enable users / managers to authorize bookings MC for their teams;

Authorize Reservation Requests: Enable managers to authorize reservations requests;

Create/Execute Job Schedules: Enable users to create and execute job schedules;

View Charts: Enable users to view charts.

Reports

Run Bradford Factor: Enable users to run Bradford Factor;

Run/Configure Team Reports: Enable managers to run and configure reports for their teams.

Settings

View Preferences: Enable users to view preferences;

Edit Preferences: Enable users to edit preferences;

View

View Dashboard: Enable users to view dashboard;

View Team Manager (System): Enable users to work with Team Manager tool;

View Team PIP: Enable users to view PIP;

View Pocket PIP: Enable users to view Pocket PIP;

View PIP Details: Enable users to view PIP details;

View anomalies: Enable users/managers to view anomalies for their team.