Roles & Permissions

Who can use this: Admin only

The Roles page lets you manage system roles and control what each role can do.

Viewing Roles

1. Click Roles in the sidebar.
2. The table shows:

Column	Description
Name	The role name (e.g., Admin, HR, Manager)
Permissions	Number of permissions assigned
Users	How many users currently have this role

Creating a New Role

1. Click New Role.
2. Enter a name for the role.
3. Optionally select permissions using the checkboxes. Use Select All / Deselect All per permission group.
4. Click Create.

Editing a Role

1. Click the actions menu (⋮) → Edit.
2. Update the role name.
3. Click Update.

Protected Role

The Admin role cannot be edited or deleted — it is a protected system role.

Managing Permissions

1. Click the actions menu (⋮) → Manage Permissions.
2. A dialog opens showing all permissions grouped by module:
   • Entities
   • Departments
   • Employees
   • KPI Templates
   • KPI Cycles
   • KPI Evaluations
   • RBAC
3. Check or uncheck permissions as needed.
4. Click Save.

Admin Permissions

For the Admin role, the permissions dialog is read-only — you can view the assigned permissions but cannot modify them.

Deleting a Role

1. Click the actions menu (⋮) → Delete.
2. Confirm the deletion.

Users Must Be Reassigned

You cannot delete a role that still has users assigned to it. Reassign those users to a different role first.

Available Permission Groups

Group	Permissions
Entities	View, Create, Update, Delete
Departments	View, Create, Update, Assign Managers, Assign Team Leads
Employees	View, View All, Create, Update, Deactivate
KPI Templates	View, Create, Update, Delete
KPI Cycles	View, Create, Update, Delete, Publish
KPI Evaluations	View, Update, Review, Assign Reviewer, Force Close
RBAC	Manage