Overview
Advanced Permissions lets company admins give an employee selected management responsibilities without making them a company admin. Use it when someone needs to manage a defined area, such as employees, leave, or assets, while full admin-only controls stay protected. Advanced Permissions is support-controlled. Contact Teamper support if you need it enabled for your company.Who can use this
- Company admins can assign and remove responsibilities when Advanced Permissions is enabled.
- Employees with a responsibility can manage only that area.
- Existing company admins keep their full supported management access.
Before you start
- Confirm that Advanced Permissions is enabled for your company. Only support can enable or disable it.
- Confirm that the module for the responsibility you need is enabled. You can assign and use only responsibilities for applicable enabled modules.
The Permission tab is visible only to company admins while Advanced Permissions is enabled.
Assign management responsibilities
- Open Employees and select the employee who needs delegated access.
- Open the Permission tab.
- Keep the employee’s Company role as an employee.
- Under Can manage, turn on each responsibility the employee needs.
- Save your changes.
What each responsibility allows
Important boundaries
- A delegated manager cannot manage company roles, grants, ownership, billing, module availability, onboarding, Microsoft Calendar, or Command Center.
- An employee manager can add, edit, invite, archive, and restore employees, but Import CSV remains admin-only.
- A Leave manager does not become a Leave approver and does not gain exceptional admin-only cancellation. They can open the employee leave details needed for leave administration without receiving unrelated sensitive employee-profile information.
- A Reviews manager can manage the Reviews workflow, but participants and reviewers still have the same access to drafts and participant content as before.
Remove a responsibility
- Open the employee’s Permission tab.
- Under Can manage, turn off the responsibility you want to remove.
- Save your changes.
What happens when access changes
- If Advanced Permissions is disabled, stored grants become inactive but are not deleted. Re-enabling it restores the stored validated grants.
- If an applicable module is disabled, its responsibility cannot be used. Re-enable the module to use the applicable stored grant again.
- Promoting an employee to company admin clears their delegated grants.
- Demoting a company admin creates a standard employee with no delegated grants.