People and access

Software roles and permissions

Build each role from individual permission nodes.

2 min read

A software role is a named bundle of permissions that decides what a person can do in Ferio. You manage roles and their permissions under Settings > Permissions. Editing which permissions a role grants needs the Manage permissions permission, which is held by the workspace owner only. That limit is on purpose: it stops an administrator from quietly granting themselves more access.

The built-in roles

Every workspace starts with four system roles:

  • Super Admin: the workspace owner. Holds every permission, including billing and Manage permissions. This role is locked and cannot be renamed, restricted or deleted.
  • HR Admin: full operational access to users, teams, leave configuration, reports and company settings. Excludes billing and Manage permissions.
  • Team Lead: sees and approves their team's leave, requests their own, and handles documents on their team's requests.
  • Employee: views and requests their own leave, and cancels their own requests.

Super Admin aside, you can rename these and adjust their permissions, or build your own role with Add role and tick exactly the permissions it needs.

Permission groups

Permissions are grouped so the grid stays readable. Toggle any one on or off for a role, and the change takes effect immediately.

LeaveView own, team or all leave; request leave; approve or reject; cancel own or others' requests; record leave for others; manage all leave requests.
AdminManage users, teams, roles, leave types, quotas, holidays, country profiles and company settings; manage billing; manage permissions.
ReportsView reports, export data and view the audit log.
DocumentsManage supporting documents on requests.

Default dashboard

Each role also sets the landing page for its users. Personal summary shows balances and upcoming leave. Leave management adds the pending-approvals view for managers and HR. Executive opens the org-wide overview. Super Admin is fixed to Executive; you can change the default for any other role.

A role cannot be deleted while active users still hold it. Move those people to another role first, then the delete becomes available.

Software roles decide what a person can do; job titles and their leave behaviour are a separate setting, covered in Company roles and PTO modes.

Was this helpful?

Email our team and a real person will reply, usually within a few hours.

Email us

Manage leave the easy way

Spin up a free trial workspace with sample data and see the whole leave cycle end to end.

Start free trial