Security Roles
Tip: This feature is available with Powerpay Plus.
Powerpay Admin users can create security based user roles which allows multiple users to work in Powerpay while only accessing the information available to their assigned role.
Powerpay Admin users are the only users who can:
- Create, modify and delete user roles
- Define a default role for new users
- Define page and pop-up access for each role
Prerequisites
Role-based security must be enabled by your Service Delivery Team.
Tasks

-
Click the Pay Period menu and click the Enter button for the pay period you want to work with.
- Open the
- Click Add New Role.
- Enter a new user role name.
- (Optional) If this role is to be the default role, select the Use as default role for new users checkbox.
- Expand the Page Access node.
- Clear the check boxes next to the pages the user should NOT have access to.
- Expand the Pop-Up Access node.
- Clear the check boxes next to the pop-up pages the user should NOT have access to.
-
Expand the Controls node.
-
Clear the Pay Rate checkbox to hide pay rate for the security role.
When the Pay Rate checkbox is cleared, users assigned to the security role will NOT have access to the following pages: Audit Trails, Payroll Preview, Mass Compensation Update and the Remuneration, Pay Rate, Payroll and Year-End reports. In addition, the pay rate is masked with ‘$$$$$’ throughout Powerpay including on the following pages and sections:
- Employee Info bar
- Employee Profile page. The Annual Earnings field is also masked.
- Regular Payment – Rapid Entry page
- Employee Profile pop-ups
- Second Payment – Rapid Entry page
- messages on the Data Verification page
-
Expand the Employee Level Access node.
-
Expand the Pay Type node.
Use employee level access to limit access to Powerpay pages and functionality by pay type (salaried employees or hourly employees.)
Clear the checkboxes next to the pay type the user should not have access to.
- Pay Type for salaried employees includes all employees with pay types: Salary EE, Salary EE Paid Vac Pay each pay, Salary EE paid Add'l Accum each pay, Salary EE paid Vac Pay and Add'l Accum each pay, Salary EE also received commissions.
- Pay Type for hourly employees includes all employees with pay types: Hourly EE, Hourly EE paid Vac Pay each pay, Hourly EE paid Add'l Accum each pay, Hourly EE paid Vac Pay & Add'l Accum each pay, Hourly EE also receives commissions.
All options are selected by default for the Payroll Admin security role and cannot be cleared. When the options are cleared for other security roles, the employees with the defined Pay Types:
- do not display in the Employee List,
- are NOT searchable and
- do NOT display on any page for Regular Runs and Extra Runs on the following pages:
- Employee Timesheet (Regular and Second Payment),
- Deductions & Contributions
- Permanent Rates, Factors, Earnings
- Statutory Deductions
- Reversal
- Manual
- Accumulators
- Rapid Entry (Regular and Second Payment).
When any of the Employee Level Access options are cleared, specific page restrictions are applied. This means that select pages are unavailable for the cleared Employee Level Access type. The page restrictions are locked and cannot be enabled on the Security Role Settings Page Access options.
When the Salaried Employee or Hourly Employee options are cleared: The Audit does not display for any applicable employees for the current or previous payroll runs and, if the 'Employee Number within pay type' or 'employee surname within pay type' options are selected on the Sort/Filter page, the employee list only contains the employees that the user has access to.
- Click Save.

Note: A security role cannot be deleted if it is assigned to a user.
-
Click the Pay Period menu and click the Enter button for the pay period you want to work with.
- Open the
- Select the user role to delete.
-
Click Delete Role.

-
Click the Pay Period menu and click the Enter button for the pay period you want to work with.
- Open the
- For a new Powerpay user, click Add User. For an existing Powerpay user, click Edit.
-
For a new user, complete the fields as described in Add a new Powerpay user and, select the appropriate security role for the user from the Security Role drop-down list.
For an existing user, select the appropriate security role for the user from the Security Role drop-down list.
All of the security roles set up for the company ID are available. When role based security in enabled, this is a required field.
-
Click Submit.
The user to whom the role was assigned has the access specified by the security role.

-
Click the Pay Period menu and click the Enter button for the pay period you want to work with.
- Open the
- Select the security role to modify.
- Select the applicable Department/Distribution ID. (Employee Level Access > Department/Distribution)
-
Add all Department/Distribution IDs to the security role by selecting all the boxes.
- Click Save.
-
Remove the IDs you don't want included.
- Click Save.
Related information

Self Service configuration features are not available for Powerpay users set up with security roles with the following access restrictions:
- Page Access – Regular Payment - Statutory Deductions
- Page Access – Hire/Profile – Employee Profile
- Page Access – Hire/Profile – Direct Deposit
- HR – Emergency Contact
- Reports - Payroll Reports
- Reports - Year End Reports
- Reports - Advanced Reporting
- Control Access – Pay Rate
- Employee Level Access