Roles and Permissions

Roles decide what each person can see and do in Growee. They keep confidential information, such as salaries and identification numbers, visible only to the people who need it, while still letting everyone do their own work.

This article explains the four roles, compares what each one can do, and shows where roles are set. Understanding roles is the key to keeping your account secure and your data private.

The four roles

Growee has four roles:

Admin: full access to every feature and setting.
Manager: manages the team, documents, and evaluations, but not the financial side of the company.
HR: manages employee records, holidays, documents, and timesheets, and can see employee personal information.
Employee: access to their own information and limited details about colleagues.

What each role can do

The table below compares the main capabilities across roles. “Limited” means the role has partial access rather than full control.

Capability	Admin	Manager	HR	Employee
Log time and request their own leave	Yes	Yes	Yes	Yes
View basic colleague info (work email, position, birthday, start date)	Yes	Yes	Yes	Yes
View confidential info about others (salary, IDs, documents)	Yes	Yes	Yes	No
Approve leave requests	Yes	Yes	Yes	No
Add and invite team members	Yes	Yes	Limited	No
Manage documents and timesheets	Yes	Yes	Yes	No
Create and manage evaluations	Yes	Yes	No	No
Manage projects and clients	Yes	Yes	No	No
Manage contracts, payroll, billing, and invoices	Yes	No	No	No
Manage roles and permissions	Yes	No	No	No
Access all configurations	Yes	Limited	Limited	No

Admin

The Admin role has the most access in the app. As an Admin you can manage contracts, payroll, billing, and invoices, add new members, create holidays, positions, levels, and evaluations, and approve every type of request. Admins also have full access to configurations, where changes to holidays, templates, documents, and more are made.

Manager

The Manager role covers running the team day to day: managing departments, documents, positions, employees, their holidays, and their evaluations. Unlike an Admin, a Manager does not have access to the financial side of the organization.

HR

The HR role handles employee management and policy tasks. HR can manage holidays and holiday approvals, documents, and timesheets, and can see employee personal information. Compared to Admin and Manager, HR cannot manage roles and permissions, evaluations, projects, or clients.

Employee

Employees can access their own data and see only limited information about colleagues, such as work email, position, birthday, and working start date. They cannot see confidential details about other people, such as salary information, historical data, evaluations, or documents.

Where roles are set

You assign a role when you add a team member, and you can change it later from their profile. The role you choose determines which modules and settings that person sees when they log in. Only Admins can manage roles and the underlying permissions.

Custom roles

The four built-in roles cover most companies, but Admins can also create custom roles when a team needs a permission set that none of the defaults matches. For example, you might add an “IT Manager” role that keeps the standard employee permissions and adds the ability to manage company assets, without opening up evaluations, projects, or company settings.

To work with roles, go to Configurations → Company → Roles & Permissions (/settings/company/roles). The roles table lists every role, both built-in and custom, with an optional description and a count of how many permissions each one grants.

Roles and permissions table in Company settings, listing built-in roles and a custom IT Manager role with permission counts

To add a role:

Click Create role.
Enter a Name and, optionally, a Description.
Select the permissions the role should have.
Click Save.

The permission editor

Clicking a role in the table opens the permission editor. Permissions are grouped by module, such as Clients, Company, Documents, Evaluations, Expenses, Holidays, Projects, Team, and Timesheets. Select the checkbox next to each permission you want to grant, then click Save. Use the Search permissions box to find a specific permission quickly.

Permission editor with permissions grouped by module and a checkbox for each granular permission

Each permission is granular, so you can grant exactly the access a role needs. Many permissions come in two forms:

A company-wide version, such as Approve/Reject holidays for all employees or Manage timesheets for all employees.
A subordinate-scoped version, such as Manage holidays for subordinates or Manage evaluations for subordinates.

Note: Subordinate-scoped permissions apply only to the people a manager directly manages. If you give a Project Manager who has five direct reports the Manage holidays for subordinates and Manage evaluations for subordinates permissions, they can approve leave and run evaluations for those five people only, not for the whole company.