Skip to main content
All CollectionsOn BoardingCompany
User Management Authority Guideline
User Management Authority Guideline

Workstem web system can help Employer (Boss/HR professionalist) to manage all employee related issues (e.g. payroll and scheduling)

Workstem CS avatar
Written by Workstem CS
Updated over a week ago

Definition of different access rights

Workstem is to help employers and HR manage all staff information and Payroll in Company.

Those who have the access right to the Workstem web system are called "User" of the system. It is different from just an employee.

  1. System users could be company staff or who is not an employee of the company.

  2. Employees and HR/System administrators:

    1. An Employee without access rights cannot enjoy the function in the system backend but can conduct normal shift clock in/out and form application, etc.

    2. An Employee with access rights can use Workstem One App or Workstem web system for daily management (e.g. scheduling, payroll, etc.)

「Company」 -->「Users」

At the same time, you can set different access rights for system users according to the management required, for example:

⦁ HR who manage all employees’ files and Payroll

⦁ Admin who only check and manage employee schedule and attendance

⦁ Admin who are only responsible for managing leave applications

⦁ HR or Finance Staff who work for payroll

⦁ Outsourcers help companies manage attendance and payroll

⦁ Workstem Technical Support Team

Our system provides six different user access rights. Here will explain the differences and help you quickly get started.

1. Admin

Admin can access all functional modules and manage right.

a. Functional Modules

⦁ Can use all the functions of the system (Payroll/Leave/Attendance/Employee's Profile)

⦁ Can add new users and edit basic company information, etc.

⦁ Manage Department / Position / Location information, etc.

b. Account Manage Right

⦁ Can pay, change the subscription plan and download bills

⦁ Can change or close the system

Note⚠️: Generally, the person who signs up for a company account for the first time is defaulted to be the company admin. He or she can also add and assign others as the enterprise admin role.

2. HR

Note⚠️: The user has access to all Functional Modules like the admin. The only difference is that there is no Account Manage Right.


Assisting enterprise Admin in daily functional operations, not responsible for renewing or canceling the subscription.

Other modules' access right

3. Payroll

Pay run, export Autopay, employee payslip, payroll history, manage employee MPF, set up exempt persons, file tax for employees, download tax forms, etc.

4. Leave

Adjust holiday balance for employees, add holiday policies and leave types, approve leave applications, and export employees’ leave balance reports, etc.

5. Attendance

Add/change/delete schedule(s); Calculate attendance hours, check the employee’s check-in date, time and location, approve OT and timesheet for employees, and export attendance sheets, etc.

6. Employee's Profile

Manage employee entry/resignation, change employee information, etc.

Note⚠️7. Advanced Authorization (Admin users' settings is invalid )

  • According to the Tag, Department, Work Location and Position , the user can be authorised to manage the data addition, deletion and modification of employees, shift scheduling, attendance, and leave modules.


  1. Scope of authority:

    Enterprise admin --> HR --> Individual function for specialist user

  2. Access rights can be combined. Users can enjoy one or multiple authority

  3. Advanced Authorisation (Admin users' setting is invalid):

    It can limit the range of the users' access rights with four provided areas (Tag, Department, Work Location, Position)

Read more:

Did this answer your question?