Roles and Permissions is where administrators manage roles, grant or remove permissions, assign users to roles, configure resource access, and organize departments.
Key capabilities
HR Admins use Employee Access settings to configure how managers can view employee records outside their own.
It governs multiple visibility settings: Departmental Access, Direct Report Visibility, and Access Exceptions.
Employee Access settings reduces the risk of managers seeing records they shouldn't, while ensuring they can see the records they need.
Before You Begin
Before beginning, confirm the following:
Requirement | Details |
|---|---|
Supervisor Link Field populated | Required for Direct Report Visibility. Employee records must have the |
Manager Identity Field populated | Required for Direct Report Visibility. Employee records must have the |
Navigating to Employee Access
The Employee Access page is located within ERM Settings, under the Roles and Permissions area.
Log in and select Settings from the left navigation menu.
Click the Roles and Permissions card.
Click the Employee Access tab.
🔍 Troubleshooting Note: If the Settings menu item, Roles and Permissions card, or Employee Access tab is not visible, this may indicate a permissions issue. Ask your organization's administrator to confirm your access level.
Using Employee Access
How do I enable Departmental Access?
You can configure whether managers can view employee records for departments they are assigned to.
Set the Departmental Access toggle to enabled or disabled.
From the Department Link Field dropdown list, choose the field on the employee record used to match the manager's assigned department list.
Click Save.
How do I enable Direct Report Visibility?
You can configure whether managers can view the files of employees who list them as their manager and define which fields the system uses to resolve that relationship.
Set the Direct Report Visibility toggle to enabled or disabled.
From the Supervisor Link Field dropdown list, choose the field on the employee record that stores the supervisor's identifier — the lookup key used to find a match.
From the Manager Identity Field dropdown list, choose the field on the employee record that holds the manager's own identifier, matched against the Supervisor Link Field selected above.
Click Save.
How do I manage Access Exceptions?
You can grant an employee's permissions to another employee outside of standard Departmental Access or Direct Report Visibility rules, for a defined or open-ended time period. Such access exceptions are typically utilized when delegating responsibilities to a colleague during an extended leave of absence.
Click Add Exception.
From the employee dropdown list, select the employee the exception applies to.
From the second dropdown list, select the employee to mirror permissions from.
Optionally, set a Start Date.
Optionally, set an End Date.
Optionally, enter a note.
Click Save.
Frequently Asked Questions
Find answers to common questions about the application.
What should I do if I have a problem with ERM?
If you are unable to log in to ERM or if you encounter a problem with one of the modules in ERM, please submit a ticket in our Support Portal.