Permission groups

Permission groups, accessible under Settings → People → Permission groups, are reusable bundles of permissions that you assign to employees. When you edit a permission group, the changes are applied to every assigned employee instantly, removing the need to update individual employee permissions one by one.

Permissions that are not part of any group can still be granted as per-employee overrides. However, adding permissions to a group helps maintain clearer access control and simplifies auditing.

Permissions from modules your organisation no longer has

Each permission belongs to a module. When your organisation no longer has a module (its subscription to that module has fully expired), the permissions belonging to it stop working for everyone who receives them through a permission group, straight away.

• Such a permission cannot be added to a permission group. Saving a group that adds it is refused, with a message on the permissions field.
• A group that already contains it can still be edited and saved as long as you do not add it again. Nothing stored in the group is removed, so the permission works again once the module is back.
• Organisations billed manually are not affected: no permission is withdrawn for them.
• Permissions for managing permissions and users (the Employees module) never stop working this way, so an administrator can always repair permission groups.
• Permissions for KPIs (managing, contributing to and viewing them) and the permission to view project profitability never stop working this way either.
• Administrators keep every permission their role includes.

Example use cases

• Streamline onboarding by assigning a standard set of permissions to new employees based on their role (e.g., "Accountant", "Project Manager").
• Ensure consistent access control across teams by creating groups for departments like "Marketing Team" or "HR Department", granting them the necessary permissions for their functions.
• Quickly modify or revoke access for multiple employees simultaneously by editing a permission group, which instantly updates permissions for all assigned members.
• Manage temporary access for contractors or consultants by creating a specific group that can be easily updated or removed once their work is complete.