Roles & Permissions
ZAINOVA uses role-based access control (RBAC). Your role determines which features you can access.
Default Roles
| Role | Description | Key Capabilities |
|---|---|---|
| Employee | Standard user | View own attendance, submit requests, view notifications, manage profile |
| Manager | Team leader | Everything an employee can do, plus: approve/reject team requests, view team attendance, access reports |
| HR | Human Resources | Full employee management, all approval permissions, workflow configuration, bulk operations, advanced reports |
| Admin | System administrator | Full access to all features including company settings, user management, permissions, billing, and platform configuration |
Permission Categories
Beyond the base role, administrators can fine-tune individual permissions:
Dashboard
- View dashboard and analytics widgets
Attendance
- View own attendance
- Check in / check out
- View all employees' attendance
- Manage attendance records
- Export attendance data
- Create manual attendance entries
Requests
- View own requests
- Create requests
- View all requests
- Manage requests
- Approve requests (per request type)
Approvals
- View pending approvals
- Manage approvals
- Delegate approvals
- Override approval decisions
Users
- View employee list
- Create employees
- Edit employee details
- Delete employees
- Import employees (CSV/Excel)
- Export employee data
Reports
- View reports
- Export reports
- Advanced analytics
Settings
- Various configuration permissions (attendance rules, workflows, office locations, etc.)
How Permissions Work
- Each role starts with a default set of permissions.
- Admins can toggle individual permissions on or off for each role.
- Changes take effect immediately for all users with that role.
- The Admin role always has full access and cannot be restricted.
tip
To check your current permissions, go to Profile and view your role. Ask your administrator if you need additional access.