Step 7: Check employee roles and access rights
Now that all your data and processes have been stored in Personio, it is important in the last step to assign the access rights for certain employee roles precisely. This ensures that your employees can only view or edit the areas and information in Personio that are intended for them.
Review of employee roles
Under Configure account > Employee roles, you have the option of viewing your individual employee roles. The gray number indicates the number of active employees in the respective roles. You can now easily add employees to one or more employee roles.
In addition, you have the option to configure reminders, access to calendars, and security settings.
- Assigning reminders
Under Configure account > Employee Roles > Reminders, you can assign reminders to employee roles. This will automatically remind all employees of this role. For example, you can inform HR employees about upcoming employee birthdays.
- Calendar access
Under Configure account > Employee Roles > Calendar, select which calendars the employees of a role should have access to. All employees have access to their own calendar with reminders and meeting dates.
- Security
Under Configure account > Employee Roles > Security, you have the option to set a 2-factor authentication for certain employee roles. This setting means that employees in this role must additionally authenticate themselves with a token when logging on. This is generated by the Google Authenticator app, which your employees should download on their smartphone.
Assigning access rights
One great thing about Personio is the precise allocation of access rights to different employee groups. Go to Configure account > Employee roles > Access rights to specify separate access rights for various employee roles.
Access rights
| View | This right allows someone to simply view the related data. |
| Propose | This right allows someone to make suggestions to adjust the according data. Note that this setting requires the set up of a corresponding approval process. Read more information on that here. |
| Edit | This right allows someone to edit respective data. |
Access levels
| Own | This level is limited to the employee's own data only |
| Team | This level comprises the data of the employee's team, except oneself. How is team defined in Personio? |
| Custom | This level spans a customized selection of employees. Define the included group of employees by filters. |
| All | This level covers all active employees, except oneself |