Permission Groups - Default Roles & Permission Groups reference
This article has been written for MYOB Advanced Workforce Management consultants.
For end user help please see Default permission groups
This page lists what permissions are assigned to which default user roles in MYOB Advanced Workforce Management. This is intended as a supplement to the pages:
User permission list - The definitions of the Permissions described here.
Managing permission groups - How to create/edit your own custom permission groups.
Management Settings reference - Default Roles & Settings tile visibility - Which Management > Settings tiles are available to the various default system roles.
Please note, the following User types are restricted system roles, and are listed only for completeness:
| System Role Name | Role Purpose |
|---|---|
Super User | This is available to MYOB support staff only. |
Partner | This is available to Implementers only. |
| Onboarding Only | This role is for users who can only create their profile during onboarding only without access to any other features. |
| Onboarding | This role is for users who have accepted an invite and created an account, but not finished onboarding & created an employee. |
| Invited | This role is for users who have been invited but have not created an account yet. |
Permissions that are only available to Super Users & Partner Users should not be granted to custom permission groups.
Hidden Permissions cannot be granted to user types, but are assigned to pre-defined permission groups.
This page was last updated for the 9.5 release in February 2023, additional permissions may have been added since then.
The permission group "View own employee roster " is affected by the company wide setting > Roster > "Allow employees to see full rosters"
The own in this permission group name refers to the "own employee roster" screen.
As a consequence, if you set "View own employee roster' to true, and you have "Allow employees to see full rosters" set to true, all employees with this permission will be able to see other employee's rosters for locations they have access to.
Permission Name | Permission Description | Super User | Partner | Admin | M + Payroll | M + Finance | Manager | Hiring Manager | Employee | Onboarding Only | Onboarding/Invited |
|---|---|---|---|---|---|---|---|---|---|---|---|
sudo | HIDDEN Permission: Sudo - grants all permissions | ✔️ |
|
|
|
|
|
|
|
| None |
absence:approve, | Approve leave requests |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None | |||
absence:balance, | View leave balances |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None | |||
absence:read, | HIDDEN Permission: Absence:read |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ |
|
|
| None |
absence:write, | Create and update leave requests |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None | |||
admin, | HIDDEN Permission: Admin |
| ✔️ | ✔️ |
|
|
|
|
|
| None |
business, | View business intelligence |
| ✔️ | ✔️ | ✔️ | ✔️ | None | ||||
costings, | View roster and timesheets costings |
| ✔️ | ✔️ | ✔️ | ✔️ | None | ||||
dashboard-notification:write, | Create and update company dashboard notifications |
| ✔️ |
|
|
|
|
|
|
| None |
documents:read, | View document library |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None | ||
documents:write, | Create and update documents in the document library |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None | |||
employees:card, | View basic employees information |
| ✔️ | ✔️ | ✔️ | None | |||||
employees:read, | View full employees information |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None | ||
employee:requirements:read, | View employees licences and training |
| ✔️ | ✔️ | ✔️ | None | |||||
employee:requirements:write, | Create and update employees licences and training |
| ✔️ | ✔️ | ✔️ | None | |||||
employees:sensitive, | View and upload sensitive employee documents |
| ✔️ | ✔️ | ✔️ | None | |||||
employees:write, | Create and update employees |
| ✔️ | ✔️ | ✔️ | None | |||||
employees:remove, | Archive employees |
| ✔️ | ✔️ | ✔️ | None | |||||
employees:hidden, | View and manage non-payrolled employees |
| ✔️ | ✔️ | ✔️ | None | |||||
employees:finance, | HIDDEN Permission: employees:Finance |
| ✔️ | ✔️ | ✔️ |
|
|
|
|
| None |
expenses:approve, | Approve expense requests |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None | |||
expenses:read, | View expense requests |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None | |||
expenses:write, | Create and update expense requests |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None | |||
hire:read, | View onboarding statuses |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None | ||
hire:write, | Create onboarding invites |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None | ||
integrations, | Create and update integrations |
| ✔️ |
|
|
|
|
|
|
| None |
learning, | Allow access to learning portal |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None | ||
hris, | Staff permissions with HRIS |
| ✔️ |
|
|
|
|
|
|
| None |
onboarding:read:own, | View information relating to own onboarding flow |
|
|
|
|
|
|
|
|
| None |
onboarding:write:own, | Add and update information relating to own onboarding flow |
|
|
|
|
|
|
|
|
| None |
payroll, | Payroll management |
| ✔️ | ✔️ | ✔️ | None | |||||
pay-levels:global:clone, | Clone global pay levels |
| ✔️ |
|
|
|
|
|
|
| None |
pay-rules:global:clone, | Clone global pay rules |
| ✔️ |
|
|
|
|
|
|
| None |
permissions:read, | View permission groups |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None | ||
permissions:write, | Create and update permission groups |
| ✔️ | ✔️ | None | ||||||
populate-company, | Generate demo data for a company |
| ✔️ |
|
|
|
|
|
|
| None |
profile:details, | View own employee profile |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None |
profile:schedule, | View own employee roster* |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None | ||
profile:requests, | View own employee shift requests |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None | ||
profile:leave, | View own employee leave |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None | ||
profile:expenses, | View own employee expenses |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None | ||
reports, | View reporting |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None | |||
reports:analytics, | View analytics reports |
| ✔️ | ✔️ | ✔️ | None | |||||
settings, | View settings |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None | |||
settings:security, | HIDDEN Permission: settings:security |
| ✔️ |
|
|
|
|
|
|
| None |
schedule:read, | View roster |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None | |||
schedule:write, | Update and publish roster |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None | |||
smart-roster, | Update smart roster settings |
| ✔️ |
|
|
|
|
|
|
| None |
template:global:apply, | Apply global templates to a company |
| ✔️ |
|
|
|
|
|
|
| None |
timesheets:read, | View time and attendance |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None | |||
timesheets:read:own, | View own time and attendance in employee portal |
| ✔️ | ✔️ | ✔️ | None | |||||
timesheets:write, | Create and update timesheets |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None | |||
timesheets:write:own | Create and update own timesheet entry through the employee portal or mobile app |
| ✔️ | ✔️ | None | ||||||
timesheets:approve, | Approve timesheets |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None | |||
timesheets:commit, | Authorise timesheets for payroll |
| ✔️ | ✔️ | ✔️ | ✔️ | None | ||||
template:write, | Create, Update and Delete template |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None | |||
template:view | View templates |
| ✔️ | ✔️ | ✔️ | ✔️ | ✔️ | None |
This article has been written for MYOB Advanced Workforce Management consultants. Some options may be unavailable to end users.
If you need more help with this topic, contact your MYOB Advanced Workforce Management partner. If MYOB support you directly, email businesssupport@myob.com.