This article provides an overview of all available permissions in Workable, grouped by category. Each permission controls access to a specific action, page, or dataset, and can be granted through additional permissions when creating new permission sets. Permission sets are available only for Enterprise plans.
Permissions are grouped into three main categories:
- Company permissions
- Recruiting permissions
- HR permissions
Company permissions
These permissions are only available to Super Admins by default and can be assigned to any Recruiting or HR access level.
| Permission | Meaning |
|---|---|
| Account settings | |
| Manage company profile | Access to settings page. |
| Create and manage departments | Access to settings page. |
| Invite and manage account members | Access to settings page. Users with this permission will view all role options when inviting through a job including admins in Recruiting. |
| Manage roles and permissions | Access to settings page. |
| Manage billing and invoices | Access to settings page. |
| Manage subscription plan | Access to settings page. If the user doesn’t also have Manage billing and invoices permission, then some functionality of the page will be hidden. |
| Integrations | |
| Manage System integrations |
Access to the following integrations:
|
| Manage Recruiting integrations |
Access to the following integrations:
|
| Manage HRIS integrations |
Access to Integrations same as Super admins.
The following need the member to have HR access level and the following additional permissions to be assigned: |
| Manage API tokens | Access to API tokens page. |
Recruiting permissions
| Permission | Meaning |
|---|---|
| Account settings | |
| Manage Careers page settings (incl. invite members) | Access to settings page same as Admins in Recruiting. A user with this permission also becomes a member of the Careers page. |
| Manage Referrals portal settings (incl. invite members) | Access to settings page same as Admins in Recruiting. |
| View and manage candidate surveys (view, create, edit, delete, enable or disable) | Access to settings page same as Admins in Recruiting. |
| Configure compliance settings (EEO, GDPR, CCPA) | Access to settings page same as Admins in Recruiting. |
| Create and manage automated actions | Access to settings page same as Admins in Recruiting. |
| Create and manage pipelines, confidential zone, ratings, disqualifications, and custom fields | Access to settings page same as Admins in Recruiting. |
| Configure privacy settings (Talent pool visibility, hired candidate visibility, candidate privacy) | Access to settings page same as Admins in Recruiting. |
| Create and manage templates (interview kits, communication, event descriptions, e-signatures, interview locations) | Access to settings page same as Admins in Recruiting. |
| Enable and manage hiring plan and configure approval flows | Access to settings page same as Admins in Recruiting. |
| Configure language kit | Access to settings page same as Admins in Recruiting. |
| Job and candidate access | |
| Access salary estimator | Gives access to the Salary estimator feature in Reports and in job and requisition creation flows. If the add-on is disabled, only users with the Manage subscription plan permission can access it. |
| View and manage all requisitions | Allows Standard and Restricted users in Recruiting full visibility and management across all requisitions in the account. Includes access to the Hiring plan tab and all non-confidential requisitions unless collaborating on a confidential job. |
| View and manage Recruiting reports (all jobs and candidates) | Allows viewing Recruiting reports across all jobs and candidates, including hiring plan and hiring performance reports. Candidate custom fields are visible regardless of field visibility settings. |
| Reports | |
| View Recruiting reports | Controls visibility of the Reports page and basic viewing access (included for Recruiting Standard, can be added as permission to Recruiting Restricted). Available reports depend on collaboration roles and requisition visibility. |
HR permissions
| Permission | Meaning |
|---|---|
| HR settings | |
| Manage company entities | Access to settings page same as HR admins have. |
| Manage profile templates | Access to settings page same as HR admins have. |
| Manage document templates | Access to settings page same as HR admins have. |
| Manage onboarding workflows and tasks | Access to settings page same as HR admins have. |
| Manage work schedules | Access to settings page same as HR admins have. |
| Manage time tracking policies | Access to settings page same as HR admins have. |
| Manage time-off policies, types, and holiday calendars | Access to 2 settings pages same as HR admins have. |
| Manage performance management templates | Access to settings page same as HR admins have. |
| Manage company folders and files | Access the Files page where they can view all files and folders, not just those tagged as accessible by employees. Perform all actions available only to HR Admins today. |
| HR reports | |
| View HR reports (admin access) |
❗Gives access to all profile fields similar to HR admin access. An HRIS Standard/Restricted user with this permission will view the Employee Management menu item in the Reports center. Within it they will view the Employee reports section with the Employee details and Headcount tiles visible. Within these tiles they have the same view access as HR admins have today. The profile updates tile is controlled by a different permission. This permission only grants access to Reports not to other related parts of the product. |
| View and create payroll reports |
❗Gives access to all profile fields similar to HR admin access. An HRIS standard/restricted user with this permission will view the Payroll menu item in the Reports center. Within these tiles they have the same view access as HR admins have today. This permission only grants access to Reports not to other related parts of the product. |
| View and export attendance reports | An HRIS standard/restricted user with this permission will view the Time and attendance reports section with the Attendance tile visible. Within these tiles they have the same view access as HR admins have today. This permission only grants access to Reports not to other related parts of the product. |
| View and export time-off reports | An HRIS standard/restricted user with this permission will view the Time and attendance reports section with the Time-off balances and Time-off requests tiles visible. Within these tiles they have the same view access as HR admins have today. This permission only grants access to Reports not to other related parts of the product. |
| View and export profile update reports |
❗Gives access to all profile fields similar to HR admin access. An HRIS standard/restricted user with this permission will view the Employee Management menu item in the Reports center. Within it they will view the Employee reports section with the Profile updates tile visible. Within these tiles they have the same view access as HR admins have today. This permission only grants access to Reports not to other related parts of the product. |
| Management of employee profile | |
| View/edit specific profile fields | ❗This permission requires an additional configuration step in the profile template to take effect. You can learn more here. |
| View all profile fields |
❗Gives view access to all profile fields similar to HR admin access. Users with this permission can view all profile fields across employee profiles in scope (active, draft, inactive; depending on their other directory permissions). This visibility overrides field restrictions set in profile templates. |
| Edit/approve all profile fields |
❗Gives edit and approve access to all profile fields similar to HR admin access. Users with this permission will:
|
| Request/cancel profile review * | Requires View access to some or all fields editable by the Employee role in the profile template. Allows a user to request employee profile review. The request sent will include only the fields that the sender has View access. When viewing profile requests made by others, the user will only see the fields they have View access to. |
| Add, edit, delete historic profile entries | When this permission is assigned, users who can view or view/edit profile fields, also have the ability to view, add, edit and delete historic fields. This means when they are viewing an employee profile, for the fields they can view they can view existing historic entries, and for the fields they can edit they see options to add historic entry, edit entry, delete entry, and can perform these actions. If no view/edit field permission is assigned, this permission has no effect. |
| Invite employees to account | Enables inviting active profiles. To invite draft, add View draft profiles permission. |
| Delete employee profile | The permission takes effect only when draft or inactive profile permissions are also assigned/accessible. This permission makes the Delete option visible in Actions. |
| Offboard employee | If you want to keep access after offboarding you need to also add View inactive profiles permission. |
| Manage employee profile templates | Users with this permission see the Change profile template option in the Actions menu of employee profiles. No field permission auto assigned as dependency. After changing the template the user can verify their action only by clicking again on Change template and see the selected template in light grey colour. |
| Create employee profiles * | Requires Edit access to the mandatory fields needed to create employee profiles in the profile template. See here Users view the option to create employees. When clicking on Create, If they have access to the mandatory fields to create a draft profile (First name, Last name, Job title), they see the Create new profile page. If not, they get an error. After creating a draft profile, the user is prompted to edit the profile and add the remaining fields. |
| Publish employee profile * | Requires Edit access to the mandatory fields needed to publish employee profiles in the profile template. Users view the option to publish. When clicking on Publish, if they have edit access to the mandatory fields, they will see the edit profile page with options to save as draft or publish. if they don’t, then an error is shown advising them they don’t have edit access to the fields required to publish. |
| Rehire employee * | Requires Edit access to the Start date field in the profile template. Users with this permission see the Rehire employee option in the Actions CTA of inactive employee profiles. If they have edit access to the Start date field they can complete the flow otherwise they get the relevant error. After rehiring is complete if the user doesn’t have View draft profiles permission, they lose access to the rehired employee profile and are redirected to People dir. |
| View draft employee profiles | What the user can access on these profiles, depends on the user's overall field permissions (other field permissions and settings in profile template). |
| View inactive and custom employee profiles | Gives access to inactive and any custom profiles. What the user can access on these profiles, depends on the user's overall field permissions (other field permissions and settings in profile template). |
| Employee files | |
| View and download e-signatures * |
To view e-signatures containing profile fields, requires View access to those fields in the profile template.
|
| Request e-signature * | Requires View or View/edit access to any fields used in e-signatures. If fields require approval you’ll also need View/Edit/Approve all fields, which grants full profile access. Extends View e-signatures permission by adding options to send e-signature requests and manage actions. |
| View and download employee uploaded files | Gives access to the Files → Uploads tab within employee profiles. It provides read-only visibility of uploaded files, allowing users to see and download documents, but not upload or delete them. |
| Manage employee uploaded files | Extends the “View and download employee uploaded files” permission adding options to upload and remove files from the employee profile. |
| Onboarding | |
| View onboarding dashboard | Grants visibility into the Onboarding dashboard and the Onboarding tab in employee profiles, including categories, workflows, and task details, without edit rights. Access to profile fields needed when viewing onboarding data and tasks, can be adjusted either through the View/edit specific fields permission or through the View/edit/approve all fields permission. |
| Manage employee onboarding and tasks * |
Requires Edit access to the Start date, Legal entity, and Personal email fields in the profile template. Also, view or edit access to any profile fields used in e-signatures or onboarding tasks.
|
| Time off management | |
| View time-off balances and requests | Users access the Time off tab within a specific employee profile, and the sub-tabs Balances, Upcoming and History, where they can view data but without manage/edit access as this is controlled by a separate permission. |
| Manage employee time-off policies | Extends the View time-off balances permission, adding options to Assign or Manage time off policies. |
| Edit employee time-off balances | Extends the View time-off balances permission, adding the option to edit a time off balance. |
| Create and cancel time-off requests | Extends the View time-off balances permission, adding the option to create or cancel a time off request. |
| Approve time-off requests on behalf of others | Adds option to approve on behalf of other employees. Through the Updates CTA- sidebar. If the user also has permission View time-off balance, then the option to approve on behalf is also visible there. Currently the permission does not allow approve on behalf of an HR admin, only specific employees or Line manager role - work ongoing to add HR admin too. |
| Import time-off balances via CSV | Adds option to Import time-off balances. Multiple dependencies so gives wide access. |
| Time tracking | |
| Manage work schedules and overrides | This is NOT a permission. View/manage work schedule and overrides is not a permission. It depends on the view/edit Work schedule field settings in the profile template. To allow a non admin user to manage work schedule and overrides, assign the View/edit specific field permission and configure the Work schedule field in the profile template. |
| View employee time tracking entries | Grants access to the Time tracking tab within any employee’s profile, including the calendar within it. Viewing the work schedule is not a permission. It depends on the Work schedule field in the profile template. |
| Manage time tracking entries | Managing work schedules and overrides is not a permission. It depends on the Work schedule field in the profile template. Clock in/out is not controlled by permissions - it is a user-specific action available to all users. |
| Manage time tracking policies | When viewing an employee’s profile, users with this permission see the option to Assign or Manage time tracking policies. No additional access is granted. If the user wants to also view the employee’s Time tracking tab they need to assign this extra permission. |
| Performance | |
| View performance dashboard |
❗Gives access to all performance results similar to HR admin access. With this permission users can see the Employees>Performance page, and within it they can view all data HR Admins can view today. Users can also see the Performance tab in each employee’s profile, where they can view all related data. |
| Manage performance review cycle | This permission extends the View performance dashboard & details permission by showing and allowing all edit and manage actions at the cycle level (profile-level actions are controlled separately by a different permission). With this permission, users can create a review cycle and start preparation, edit, duplicate, archive or end a cycle. |
| Manage performance reviews | This permission extends the View performance dashboard & details permission by showing and allowing all edit and manage actions at a profile level. Existing restrictions still apply, e.g. not being able to amend visibility rules of admin (not being able to manage review of their own manager or reporting line even though they are admins). |
| Employee directory and visibility (takes effect only when added to Restricted) | |
| View company people directory | Displays the Employees tab, listing all active employees. Selecting a name opens the employee’s profile page, with the Information tab visible. The tab shows the fields defined in the profile template as accessible to Other employees or any other field permissions the user may have. |
| View company organizational chart | Adds Org chart visibility. |
| View company work calendar | Adds Work calendar visibility. Restricted users with this permission also start seeing Employees on leave and out of office profile badges, which are otherwise hidden. |
| View HR reports (standard access) | Adds Reports page (standard view) visibility. |
| View company files and folders | Adds Files page (standard view) visibility. |
Configuration steps for certain permissions
HR permissions marked with an asterisk (*) require additional configuration in the profile template to work properly. For example, the “Rehire employee” permission requires edit access to the Start date field in the profile template. If this is not set up, the flow will not work, and the user will receive an error.
You have two options to ensure that these flows work correctly:
-
Assign view/edit specific fields and configure the profile template so that users have the required field access. This option requires you to identify which fields each flow depends on (view-only or view/edit), and then update the profile template to mark those fields as View or View/Edit for the permission set.
- Assign View/edit/approve to all fields, which guarantees the flow works but grants broad admin access.