Personnel roles and access
Personnel permissions are set by module role: Member, Manager, or Admin. These roles control who can view, create, edit, and manage personnel records, blocks, files, companies, and training. Roles are assigned per site in Settings > User Management.
Quick reference
Action | Member | Manager | Admin |
|---|---|---|---|
View personnel records | Yes | Yes | Yes |
View training results and progress | Yes | Yes | Yes |
View companies | Yes | Yes | Yes |
Add comments | Yes | Yes | Yes |
View Personnel insights | No | Yes | Yes |
Create, edit, and delete personnel records | No | Yes | Yes |
Manage blocks and file attachments | No | Yes | Yes |
View sensitive data | No | Yes | Yes |
Manage company details and contacts | No | Yes | Yes |
Delete companies and company contacts | No | No | Yes |
Manage training, quizzes, and sync data | No | Yes | Yes |
Personnel records
Members can view personnel records, including basic profile details, compliance status, and assigned assets. Viewing assigned assets also requires Premises module access. They can also add comments to records. When Restrict Comment Viewing is enabled in settings, Members can only see comment threads they posted; Managers and Admins can see all threads.
Managers can create new personnel records, edit existing ones, and delete records. Admins have the same operational access as managers, plus the ability to delete companies and company contacts. For details on what a personnel record includes, see What is the Personnel module?.
Blocks and file attachments
Members can view the blocks and files on a personnel record. Managers can add, edit, and remove personnel blocks and file attachments, including employment details, emergency contacts, qualifications, and other HR data. Admins have the same block management access as managers.
Sensitive data
Members cannot view sensitive personnel blocks or sensitive company data. Managers can view sensitive blocks such as employment details, DBS certificates, right-to-work checks, and financial details, and they can view sensitive company data. Admins have the same access as managers. For information on hiding sensitive content until it is explicitly revealed, see Control access to sensitive personnel record details.
Companies
Members can see which companies a person is linked to. Managers can create and update company records, add and update company contacts, and view sensitive company blocks. Admins have the same operational access as managers, plus the ability to delete companies and company contacts. For step-by-step instructions, see Adding and managing company details.
Training
Members can view training results and course progress. Managers can manage training courses, quizzes, and sync training data from external providers. Admins have the same training management access as managers. For step-by-step instructions, see Manage training courses and results.
Settings and configuration
Personnel settings are in Settings > Personnel. The page has an Options tab with settings for comment viewing, auto-creating records for users, inbound email comments, and notification preferences. Anyone with Personnel module access can view the settings page. To change and save settings, you need Site Manager or Site Admin (update-site permission). Users without Personnel module access see a permission-denied message: "You don't have permission to view personnel settings. Please contact your administrator."
How to change a Personnel role
Roles are assigned per site and per module. To change someone's Personnel access:
Go to Settings > User Management
Find the person and click Edit Access
In the Access Control table, set their role for the Personnel module at each site: Member, Manager, or Admin
Click Save
If you do not see Edit Access, you need the Manager role (or higher) for the Site module. You need Site Manager or Site Admin (or organisation owner) to access User Management and use Edit Access. For a full overview of the three roles, see Understanding User Roles and Permissions. To check which modules are included in your subscription, see Module Entitlements and Permission Templates.
Access to a child site automatically grants at least Member access on parent sites. Parent-site access does not automatically include child sites — each site needs its own role assignment unless explicitly granted. Someone can be a Manager at one site and a Member at another.