Skip to main content
Sign in

Overview

RBAC (Role-Based Access Control) now extends to Leave and Attendance configurations, allowing scoped admins to manage settings within their assigned boundary instead of relying on Global Admins for every change.
A boundary can be based on:
  • Legal Entity
  • Business Unit
  • Location
  • Department
  • Sub-Department
Previously, these configurations were available only to Global Admins. With this enhancement, regional HR teams, location admins, and business-unit owners can independently manage leave, attendance, holidays, shifts, weekly-offs, time tracking, and penalisation settings for employees within their scope. [RBAC_PrePo...A, Engage) | Excel]

What Problem Does It Solve?

Before RBAC support for Leave and Attendance settings:
  • Scoped admins had no visibility into these configurations.
  • Every change had to be routed through a Global Admin.
  • Regional teams could not independently manage local policies and attendance rules.
  • Admins responsible for one entity or region were exposed to organisation-wide configurations.
For example, a California leave administrator could not manage California leave plans without also gaining access to leave configurations for Texas, India, and other regions. [RBAC_PrePo...A, Engage) | Excel]

How RBAC Scoping Works

RBAC Scoping is based on:
  • Role → What actions a user can perform
  • Scope → Which employees, policies, and configurations the user can access
Scoped admins can view, create, and manage only those configurations whose assignments fall within their scope. Configurations outside their scope remain hidden. [RBAC_PrePo...A, Engage) | Excel]
Global Admins continue to have unrestricted access to all Leave and Attendance configurations across the organisation. [RBAC_PrePo...A, Engage) | Excel]

What's Included?

Leave

Manage Leave Plan

Scoped admins can:
  • Create leave plans within their scope
  • Manage leave types, rules, and variations
  • Edit leave plans whose assignment is fully covered by their scope
They cannot:
  • Access leave plans assigned outside their scope
  • Access partially overlapping leave plans

Manage Year-End Processing of Leave

Scoped admins can run:
  • Carry Forward
  • Encashment
  • Lapse processing
for employees within their assigned scope only. [RBAC_PrePo...A, Engage) | Excel]

Holidays

Holiday Lists

Scoped admins can:
  • View holiday calendars applicable to their scope
  • Create holiday calendars for their region
  • Manage holiday lists within their scope
Holiday calendars belonging to other regions remain hidden. [RBAC_PrePo...A, Engage) | Excel]

Shifts & Weekly-Offs

Manage Shifts and Weekly-Offs

Scoped admins can:
  • Create shift definitions
  • Create weekly-off patterns
  • Manage configurations within their boundary
Shift definitions assigned outside their scope remain hidden.

Manage Shift/Weekly-Off Rules

Scoped admins can:
  • Create rules
  • Edit rules
  • Manage request eligibility
only for employees within their scope. [RBAC_PrePo...A, Engage) | Excel]

Time Tracking

Manage Time Tracking Policy

Scoped admins can:
  • Create time tracking policies
  • Manage policies assigned to employees within their scope
  • Configure local attendance tracking rules
Policies belonging to other regions remain hidden. [RBAC_PrePo...A, Engage) | Excel]

Penalisation

Manage Penalisation Policy

Scoped admins can:
  • Create penalisation policies
  • Manage late-in rules
  • Manage early-out rules
  • Configure LOP-related attendance penalties
Policies outside their scope are hidden.
For example, a Texas admin cannot modify a California penalisation rule. [RBAC_PrePo...A, Engage) | Excel]

Additional Attendance Configurations

Shift Board

Scoped admins can:
  • View shift boards for employees within their scope
  • Manage rostering for in-scope employees
  • Add or remove in-scope employees from shift boards
Out-of-scope employees are not displayed. [RBAC_PrePo...A, Engage) | Excel]

Shift Rotation

Scoped admins can:
  • View rotation groups within their scope
  • Create and manage shift rotations
  • Manage employees in rotation groups they own
Rotations beyond their scope remain hidden. [RBAC_PrePo...A, Engage) | Excel]

Geo Locations

Scoped admins can:
  • Create and manage geo-fenced attendance locations
  • Manage attendance capture locations within their scope
Locations outside their assigned boundary remain hidden. [RBAC_PrePo...A, Engage) | Excel]

Device Clocking Settings

Scoped admins can:
  • Manage clocking devices
  • Configure attendance devices within their location boundary
Device configurations outside their scope remain hidden. [RBAC_PrePo...A, Engage) | Excel]

Important Notes

Global Admin Access

Global Admins continue to:
  • Access all employees
  • View all configurations
  • Manage all policies
  • Override scope restrictions
No existing Global Admin access is impacted. [RBAC_PrePo...A, Engage) | Excel]

Leave Plan Visibility

Scoped admins can edit leave plans only when the plan's assignment is fully covered by their scope.
Plans with partial overlap remain hidden. [RBAC_PrePo...A, Engage) | Excel]

Attendance Display Settings

Manage Attendance Display Settings remains an organisation-wide configuration.
If a scoped admin modifies attendance display settings, the changes apply to all employees across the organisation. [RBAC_PrePo...A, Engage) | Excel]

Hidden Configurations

Configurations assigned outside an admin's scope are hidden and cannot be viewed or modified. [RBAC_PrePo...A, Engage) | Excel]

Example Scenarios

California Leave Admin

Can:
  • Create California leave plans
  • Run year-end carry-forward
  • Process leave encashment
  • Configure California-specific leave rules
Cannot:

Regional HR Team

Can:
  • Maintain regional holiday calendars
  • Configure shifts and weekly-offs
  • Manage attendance tracking policies
  • Configure penalisation rules
Cannot:

Site Admin

Can:
  • Configure geo locations
  • Manage clocking devices
  • Create shift patterns
  • Manage shift boards for their site
Cannot:

Frequently Asked Questions

Can scoped admins manage leave plans?

Yes. They can create and manage leave plans whose assignment is fully covered by their scope. [RBAC_PrePo...A, Engage) | Excel]

Can scoped admins run year-end leave processing?

Yes. They can run carry-forward, encashment, and lapse processing for employees within their scope. [RBAC_PrePo...A, Engage) | Excel]

Can scoped admins manage holiday calendars?

Yes. They can create and manage holiday calendars applicable to their assigned boundary. [RBAC_PrePo...A, Engage) | Excel]

Can scoped admins manage time tracking and penalisation policies?

Yes. They can manage policies assigned to employees within their scope. Policies outside their scope remain hidden. [RBAC_PrePo...A, Engage) | Excel]

Can a location admin manage another location's shifts?

No. Shift definitions, rules, boards, and rotations outside the admin's scope are not visible. [RBAC_PrePo...A, Engage) | Excel]

Do Global Admins lose access?

No. Global Admins retain unrestricted access to all Leave and Attendance configurations.

Related articles

Comments

0 comments

Please sign in to leave a comment.

Powered by Zendesk