Permissions Management
Permissions Management provides granular control over who can access and perform specific actions within the ZenDash HRM platform. It uses a role-based access control system with customizable permission groups.
Understanding Permissions
- The system uses Permission Groups to bundle related permissions together.
- Each permission group defines what features and actions are available to its members.
- Employees can be assigned to one or more permission groups.
Permission Groups Dashboard
- Navigate to People > Admin Settings > Permission Groups to manage permission groups.
- The dashboard displays all permission groups with their names and member counts.
- Use the split-panel interface to view group details and member lists.
Creating a Permission Group
- Click Create Group to define a new permission group.
- Provide a name and description for the group.
- Select the permissions to include in the group across categories:
- Employee Management: View, create, edit, and delete employee records.
- Leave Management: View, create, approve, and reject leave requests.
- Payroll: View and manage payroll data.
- Projects: View, create, and manage projects and tasks.
- Device Monitoring: View and configure device monitoring.
- Analytics: Access HR analytics dashboards.
- Admin Settings: Configure system settings.
- Notifications: Manage notification settings.
- Onboarding: Manage onboarding processes.
- Appraisals: Conduct and manage appraisals.
- Save the permission group.
Assigning Permissions to Employees
- Add employees to permission groups from the group detail view.
- An employee's effective permissions are the combination of all groups they belong to.
- Changes to permission groups take effect immediately for all members.
Best Practices
- Follow the principle of least privilege: assign only the permissions necessary for an employee's role.
- Create role-based groups (e.g., "HR Manager", "Team Lead", "Employee") for easy management.
- Regularly review permission assignments to ensure they remain appropriate.
- Use descriptive names for permission groups to make their purpose clear.