---
title: "User roles overview"
slug: "what-are-the-user-roles"
description: "Explore user roles in Cintra People HR, including HR Manager, Team Manager, and Restricted Staff, with configurable permissions for effective management."
updated: 2026-05-19T14:01:37Z
published: 2026-05-19T14:01:37Z
canonical: "help.cintra.co.uk/what-are-the-user-roles"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.cintra.co.uk/llms.txt
> Use this file to discover all available pages before exploring further.

# User roles overview

### **Available user roles**

Cintra People HR supports the below roles:

| **User Roles** |
| --- |
| Employee |
| Team Manager |
| HR Manager |
| Admin |
| ADU Admin (when enabled) |

| **Restricted Staff (Optional)** |
| --- |
| IT Manager |
| Payroll Admin |
| HR Assistant |

**User Roles**

At least one employee in the organisation should be given a user role or HR Manager or Admin. Team Managers will be assigned automatically and ADU Admins are only available where ADUs/Divisions are enabled.

**Restricted Staff (optional)** Restricted Staff roles are not mandatory, but can be configured to give users additional access to some employee data. These roles are optional and highly configurable. These roles come with a set of default permissions (summarized below) which can be configured in the Process Configuration menu. You must review these permissions to ensure these defaults meet your requirements.

> [!NOTE]
> **NOTE**: Restricted Staff roles are visible in the Config screens, regardless of whether you have assigned them to a user or not.

For more information and to help you set up your user roles take a look at the following articles: [Configuring user Roles & Access](/hr/docs/configuring-user-roles-access) and [Categories & Fields Configuration](/hr/docs/categories-fields).

### **Default access per role**

The next section details the default access for each User Role and Restricted Role, however these can be configured to allow different access within your organization.

**Employee**

A joining, active or former member of the organisation for whom Employee Records and an Employee Profile are held within the system. You cannot explicitly assign this role as access is automatically granted when a user is added to the system.

**Team Manager**

A user is automatically assigned the Team Manager role when they are made a manager of at least 1 team. Managers have access to the additional sections on the Dashboard, including My Actions, My Teams, Team Allowances and also the Reporting process on the menu.

A Team Manager can have either a reader or editor role in a Team that they manage. A reader role will give them read access to data of employees they manage and an editor role will give them access to edit the data of employees they manage.

| **HR Manager** | **Admin** |
| --- | --- |
| **Employee Admin** - Full edit access to employee data - Full edit access to organisation configuration including adding employees, assigning managers, configuring approvers & approval flows - Ability to manage Roles & Access for all employees Full access to reporting **Feature Admin** - Leave Config - Work Profiles - Approval Flows - Public Holidays - Adjust Allowance Range - Bulk Adjust Allowances - Backfill & Backfill from CSV - Leave & Sickness Types - Compulsory Days - Return to Work - Email Templates - Security - Google Team Calendars (Google integration only) - iCal Team Calendars - HR Config *(HR Essentials & Success only)* - Bulk Update Employee Profiles - Bulk Create Employee Records *(HR Advanced only)* - Record Categories & Fields - Dropdown Lists - Record Templates *(HR Advanced only)* - Notifications - AI Content Generation *(HR Advanced only)* - Company Docs Config - Document Types - AI Search Assistant *(HR Advanced only)* - Performance Config *(HR Advanced only)* - Culture Config *(HR Advanced only)* | **Employee Admin** - Edit access to a limited amount of employee data (everything on the 'Employee Admin' page) - Full edit access to organisation configuration including adding employees, assigning managers, configuring approvers and approval flows - Ability to manage Roles & Access of employees No access to reporting **Feature Admin** - Leave Config - Work Profiles - Approval Flows - Public Holidays - Leave & Sickness Types - Compulsory Days - Return to Work - Email Templates - Security - Google Team Calendars (Google integration only) - iCal Team Calendars - HR Config *(HR Essentials & Success only)* - Record Categories & Fields - Dropdown Lists - Record Templates *(HR Advanced only)* - Notifications - AI Content Generation *(HR Advanced only)* - Access to System Config - Configure General Settings & Customisation - Add Verified Domains - Manage Divisions/ADUs - Manage Integrations - Company Docs Config - Document Types - AI Search Assistant *(HR Advanced only)* - Performance Config *(HR Advanced only)* - Culture Config *(HR Advanced only)* **System Config** - Customisation - Verified Domains - Divisions / ADUS - System Integrations |

**ADU Admin**

This role is only applicable is [ADUs/Divisions](/hr/docs/what-are-adus-and-when-should-they-be-used) are enabled for an organisation. The ADU Admin role grants access to configure ADUs/Divisions as well as manage all employee, regardless of ADU/Division.

**IT Manager**

Users with the IT Manager role have read access to basic employee data found in the Employee Profile section (such as name and work email address) and have edit access to all fields in the Assets section for all Employees.

**Payroll Admin**

Users with the Payroll Admin role have read access to basic employee data found in the Employee section (such as name, address, and salary) and edit access to employee bank details tab on the Personal profile page.

**HR Assistant**

Users with the HR Assistant role have read access to all employee data, except information in the Discipline tab.