Assumed reading: How can I create a new User and authorise levels of access?
This article is designed to provide Account Administrators the ability to give limited, full, or, no access to the employee payroll tab, a new feature of enableHR from mid-April 2021.
Background
enableHR has released a new user security enhancement where all New Zealand accounts will be able to activate the Payroll tab for their employee records to store your employee record's bank, Kiwi saver, tax and leave information.
If required, you are able to restrict user access to employee record's payroll information as needed, see the below user access roles to provide/restrict your user's access to this information.
Provide a user with full access to the payroll details
Role: Payroll Tab
Any user with the Payroll Tab user security role will be able to view and manage the employee's payroll details. This will provide access to all the payroll tabs.
Please note: The user profile will need to also have one of the Employee Management roles added to their user profile too, see here for a list of employee management roles that you could provide your managers: User access roles
Provide a user with limited access, leave only
Role: Payroll Tab (leave only)
Any user with the Payroll Tab (leave only) user security role will be able to view and manage the employee's payroll details. This will provide access to all the payroll tabs.
Please note: The user profile will need to also have one of the Employee Management roles added to their user profile too, see here for a list of employee management roles that you could provide your managers: User access roles
Provide a user with no access to employee payroll details
Role: Account Admin
Any user with the AccountAdmin user security role by default will not have full access to the payroll field tab. The user will need the Payroll Tab role as well in order to view, manage, and approve/reject self service requests related to payroll. For more information on how users can approve/reject employee's self service updates, see this article: How to Approve / Reject Self Service Requests
For non-Admin users:
Simply do not provide any of the above user access roles to the user profile, and the manger will not be able to see the payroll tab.
Example below has 'EmployeeManagement' user access role only.
