> ## Documentation Index
> Fetch the complete documentation index at: https://teamper.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Advanced Permissions

> Delegate specific company-management responsibilities without giving an employee full admin access.

## Overview

**Advanced Permissions** lets company admins give an employee selected management responsibilities without making them a company admin. Use it when someone needs to manage a defined area, such as employees, leave, or assets, while full admin-only controls stay protected.

Advanced Permissions is support-controlled. Contact Teamper support if you need it enabled for your company.

## Who can use this

* Company admins can assign and remove responsibilities when Advanced Permissions is enabled.
* Employees with a responsibility can manage only that area.
* Existing company admins keep their full supported management access.

## Before you start

* Confirm that Advanced Permissions is enabled for your company. Only support can enable or disable it.
* Confirm that the module for the responsibility you need is enabled. You can assign and use only responsibilities for applicable enabled modules.

<Note>
  The **Permission** tab is visible only to company admins while Advanced Permissions is enabled.
</Note>

## Assign management responsibilities

1. Open **Employees** and select the employee who needs delegated access.
2. Open the **Permission** tab.
3. Keep the employee's **Company role** as an employee.
4. Under **Can manage**, turn on each responsibility the employee needs.
5. Save your changes.

The employee sees navigation only for the responsibilities they can manage. They do not receive unrelated admin-only pages.

## What each responsibility allows

| Responsibility | What the employee can manage | What stays outside this responsibility |
| - | - | - |
| **Company settings** | Company name, fiscal year, work week, workday length, org-chart sharing, departments, and department approvers | Billing, ownership, memberships and grants, module availability, personal settings, and holiday calendars |
| **Leave** | Leave configuration, reports, employee leave administration, and holiday calendars | Leave approval and exceptional admin-only cancellation |
| **Employees** | Employee lifecycle, invitations, Employee Records and fields, sensitive profile information, contacts, and documents where available | Roles, grants, ownership, leave data, leave-policy changes, and bulk employee import |
| **Reviews** | Templates, cycles, roster, reminders, lifecycle, and completed review content | Participant and draft visibility boundaries still apply |
| **Assets** | Asset register, categories, assignments, history, costs, and files | Access when Asset Tracking is not enabled |
| **Company requests** | Request types and workflows | Access when Company Requests is not enabled |
| **Company handbook** | Handbook drafts and publishing | Access when the Company Handbook module is not enabled |

## Important boundaries

* A delegated manager cannot manage company roles, grants, ownership, billing, module availability, onboarding, Microsoft Calendar, or Command Center.
* An employee manager can add, edit, invite, archive, and restore employees, but **Import CSV** remains admin-only.
* A Leave manager does not become a Leave approver and does not gain exceptional admin-only cancellation. They can open the employee leave details needed for leave administration without receiving unrelated sensitive employee-profile information.
* A Reviews manager can manage the Reviews workflow, but participants and reviewers still have the same access to drafts and participant content as before.

## Remove a responsibility

1. Open the employee's **Permission** tab.
2. Under **Can manage**, turn off the responsibility you want to remove.
3. Save your changes.

The employee loses access to that management area while their other assigned responsibilities stay active.

## What happens when access changes

* If Advanced Permissions is disabled, stored grants become inactive but are not deleted. Re-enabling it restores the stored validated grants.
* If an applicable module is disabled, its responsibility cannot be used. Re-enable the module to use the applicable stored grant again.
* Promoting an employee to company admin clears their delegated grants.
* Demoting a company admin creates a standard employee with no delegated grants.

## Troubleshooting

### I cannot see the Permission tab

You must be a company admin, and Advanced Permissions must be enabled. Ask a company admin to confirm your access or contact Teamper support to enable the feature.

### I cannot select a responsibility

Check that the relevant module is enabled for your company. Responsibilities are available only for applicable enabled modules.

### A delegated manager cannot find an admin page

Check that they have the matching **Can manage** responsibility. Admin-only areas, including billing, access management, module availability, onboarding, Microsoft Calendar, and Command Center, cannot be delegated.

## Related articles

* [Manage employees](/docs/admins/employees)
* [Company settings](/docs/admins/company-settings)
* [Reviews](/docs/admins/reviews/overview)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.