Who can see what in HR
Access levels, the reporting line, and self-service invites: the three things that decide how much of HR somebody sees.
An access level is a company role
Everybody with a login holds exactly one access level. Underneath, a level is an ordinary company role, the same object the rest of WizzHire uses, so a level you build here works everywhere.
People → HR settings → Access levels lists the levels, with the number of people on each. The HR access page lists the people instead, and is where you move somebody from one level to another.
The three built-in levels
- Employee: their own record and their own leave. Cannot see anybody else's.
- Line manager: everything an employee sees, plus the leave of everyone below them in the reporting line, including deciding on it.
- HR admin: every record, every request, and every setting on the HR pages.
These three are built in, so their permissions cannot be edited and their names are reserved. If you need a different mix, build a level of your own.
A line manager sees the line below them
Nothing about a line manager is configured by hand. It comes from the manager set on each employee record, which is the same thing the org chart draws. Somebody with nobody below them sees nothing extra, whatever their level says.
Build your own level
New access level starts from a level that already exists and copies its permissions, then you add and remove what it may do. The permissions are grouped into their own things, their team, and the whole company.
- Give it a name: anything except Employee, Line manager or HR admin. Those three are reserved.
- Say what it is for: one line, so the next person reading the list knows why the level exists.
- Allow at least one thing: a level that allows nothing cannot be saved.
Deleting a level removes the role from the company, and everybody who held it drops to Employee.
Give somebody self-service
A record on its own is something HR keeps. An invite turns it into something the person can use: their own page, their employment details, their balance, their requests and their hours.
Open them in the directory and choose Invite to self-service, then pick whether they arrive as an employee or a line manager. Somebody already on your team gets no second account: the invite only connects their record to the login they already have.
Moving somebody to another level
On HR access, pick a different level on their row. It writes the company role onto their login straight away, and applies from their next request onwards.