Software roles and permissions
Build each role from individual permission nodes.
A software role is a named bundle of permissions that decides what a person can do in Ferio. You manage roles and their permissions under Settings > Permissions. Editing which permissions a role grants needs the Manage permissions permission, which is held by the workspace owner only. That limit is on purpose: it stops an administrator from quietly granting themselves more access.
The built-in roles
Every workspace starts with four system roles:
- Super Admin: the workspace owner. Holds every permission, including billing and Manage permissions. This role is locked and cannot be renamed, restricted or deleted.
- HR Admin: full operational access to users, teams, leave configuration, reports and company settings. Excludes billing and Manage permissions.
- Team Lead: sees and approves their team's leave, requests their own, and handles documents on their team's requests.
- Employee: views and requests their own leave, and cancels their own requests.
Super Admin aside, you can rename these and adjust their permissions, or build your own role with Add role and tick exactly the permissions it needs.
Permission groups
Permissions are grouped so the grid stays readable. Toggle any one on or off for a role, and the change takes effect immediately.
| Leave | View own, team or all leave; request leave; approve or reject; cancel own or others' requests; record leave for others; manage all leave requests. |
| Admin | Manage users, teams, roles, leave types, quotas, holidays, country profiles and company settings; manage billing; manage permissions. |
| Reports | View reports, export data and view the audit log. |
| Documents | Manage supporting documents on requests. |
Default dashboard
Each role also sets the landing page for its users. Personal summary shows balances and upcoming leave. Leave management adds the pending-approvals view for managers and HR. Executive opens the org-wide overview. Super Admin is fixed to Executive; you can change the default for any other role.
A role cannot be deleted while active users still hold it. Move those people to another role first, then the delete becomes available.
Software roles decide what a person can do; job titles and their leave behaviour are a separate setting, covered in Company roles and PTO modes.
Was this helpful?
Email our team and a real person will reply, usually within a few hours.
Manage leave the easy way
Spin up a free trial workspace with sample data and see the whole leave cycle end to end.