Skip to main content

Understanding Default Permissions & Creating Custom Permissions

Understanding Default Permissions & Creating Custom Permissions

Myo Zaw Hein avatar
Written by Myo Zaw Hein
Updated yesterday

In the Better HR system, permissions define what each employee can access and do within the platform. There are three predefined default permissions, and the option to create your custom permissions for specific roles.


Default Permission Types:

  1. Admin Permission

    • Full access to all system modules, including Payroll.

    • Can create, edit, delete, and view all data.

  2. HR Manager Permission

    • Full access to most system modules including Payroll.

    • Can create, edit, delete, and view most data.

  3. Manager Permission

    • Limited access.

    • Cannot access Payroll or Salary modules.

    • Cannot approve or reject employee job activities like promotions, resignations, adjustments, or transfers.

    • Cannot access Settings, Employee Documents, or Assets.

    • Only has read access to the Employee module—no ability to create, edit, or delete employees.

Note: These default permissions cannot be edited in terms of their permission rating or module access.

If the employee’s role matches one of these default permissions, simply assign them to the appropriate group. However, if you need a new set of rules, you can create a custom permission.


Creating a New Permission Group

  1. Click the User Icon from the main menu.

  2. Go to the Settings section.

  3. You will land on the Company tab. Find and click the Permissions tab.

  4. To create a new permission group, click + Add New Permission in the top right corner.

This will take you to the About Permission tab. Here’s how to fill it out:

  • Group Name: Enter the name of the new permission group.

  • Description: Briefly describe the purpose of this permission.

  • Transfer Ownership: Assign who owns or manages this permission group.

Assign Employees to This Permission

  • Under Employees in this permission group, you'll see the number of employees currently assigned.

  • Click the green Add icon to assign a new employee.

  • A box titled "Which employees will be affected by this permission?" will appear.

  • Click Select, type the employee’s name, and choose from the dropdown.

  • The selected employee will appear in the list below.

  • Click Confirm to save.

Note: Each employee can only belong to one permission group at a time.


Show Employee Scope

Define what employees can be seen by this permission group. You can use one of two methods:

Permission Access by Logic:

  • All – Can view all employees.

  • My Department – Can view employees in the same department.

  • Direct Report Only – Can view only their direct reports.

  • Direct Report and Subsequent Report – Can view direct and indirect reports.

  • Location – Can view employees in the same location.

  • Custom Tag – Can view employees sharing the same custom tag.

Permission Access by Group:

  • Define access by selecting specific:

    • Departments

    • Positions

    • Custom Tags


Set Permission Ratings

You can choose which modules the permission group has access to, and define what actions are allowed (create, update, delete, read). Modules include:

  • Assets

  • Attendance

  • Chat

  • Dashboard

  • Employee

  • Employee Document

  • Employee Resource Center

  • Job Activities (including salary)

  • Leave

  • Notification

  • OT

  • Payroll

  • Performance Appraisal

  • Permission

  • Project-based Payment

  • Recruitment

  • Salary

  • Setting

  • Summary

Tick the boxes to grant the appropriate access level for each module.

Once done, click Create Permission at the top right corner to save.


You’ve now created a new custom permission group and assigned it to the relevant employees.

Did this answer your question?