How to manage accesses: learn about the main permissions

The Permissions menu in Day.io controls which areas and actions each access level can perform. Administrators use this tool to manage access to reports, time tracking, payroll, documents and other sensitive settings.

Understanding the key permission topics ensures users have only the necessary access.

1. Access the list of permission levels and topics

   • In Company Settings > Permissions, select a level in the left column to view its permissions.

   • The central column lists the available permission topics. Next to each topic, there is a checkbox and, if there are sub-permissions, a counter (e.g., 2/3) or All button to access specific options.
     
     

2. Understand the main permission features

   • Create and manage requests without an end date - ability to create Requests without an end date;
   • Billing - view the Finance tab in the Profile menu (web);
   • Cancel approved requests - ability to also cancel approved requests, in addition to pending ones;
   • Clients - view and create clients for your company;
   • Documents - ability to access and use the Documents module;
   • Company profile - view and edit the profile in settings;
   • Dashboards - view and handle Dashboards;
   • Departments - view and create departments in the Settings tab. If this key is disabled, it also does not allow the permission in question to change employees' departments in bulk actions;
   • Employees - ability to fully view the Employees tab. The sub-permissions allow more actions related to employees;
   • Holidays - view and create holidays in the Settings tab. It does not allow the permission in question to also change employees' holiday groups;
   • Banked hours Adjustment - if you enable this key, the Hours Bank report will have a time bank adjustment option. 
   • Job sites - view the Service Points tab in Settings + create a Service Point. If disabled, the permission can still add already created locations to the employee.
   • Locations - view the Locations tab in Settings + create Locations. If disabled, the permission can still add already created locations to the employee.
   • Integrations and Marketplace - the Integrations tab appears in Settings for this permission;
   • My signatures- ability to sign Timesheets via the app;
   • Manage On-call  - enable the option to create and manage on-call shifts (recommended to enable only for Supervisor permission);
   • Request & View On-call - enable the option to create and view on-call shifts (recommended to enable for Supervisor and Basic permissions);
   • Payroll - ability to fully view the Payroll tab. It is recommended that this key is only enabled for Administrators and HR permissions;
   • Manage permissions - ability to change or create an additional permission for an employee. It is recommended that this key is only enabled for Administrators and HR permissions;
   • Positions - View and create positions in the Settings tab. If disabled, it does not allow the permission in question to also change employees' positions in bulk actions;
   • Manage punches - approve and reject time records (not available for supervisors);
   • Punches settings - change the employee's time record model (computer, app, and tablet);
   • View punches - view the Time Records tab;
   • Reports
     • Advanced Reports - access to Summary reports, Client Report, Check In, Fiscal Reports, and Electronic Signature;
     • Basic Reports - access to Timesheet, Timecard Mirror, Overtime, Time Bank, and Delays reports;
     • Download Center - access to Download Center reports: Inconsistency Report and Validation Report;
   • Requests - view and create Requests;
   • Super Approver - this item applies to Requests - that is, if this permission is enabled, it overrides any Approval Workflow and approves requests regardless of which hierarchy approves the request. Learn more about the Requests Tool and Approval Workflow in this article;
   • Rule and Limits - view, create, and change Rule Groups for employees.
   • Schedules - view, create, and change employees' Work Schedules;
   • Subsidiaries - view and create branches in the Settings tab. If disabled, it does not allow the permission in question to also change employees' branches in bulk actions - only if you specifically change the Position in an employee's profile;
   • Super Punch - enable the Super Punch option for this profile. If this key is enabled for Basic, the user should only see their own time records and all sorting performed will be submitted for management approval;
   • Kiosk Settings - permission to change the kiosk settings on the tablet
   • Teams - view and create departments in the Settings tab. If disabled, it does not allow the permission in question to also change employees' teams in bulk actions;
   • Time Clocks - view, edit, or create Time Clocks in Settings;
   • Automation - ability to access and use the Automations module.

3. Edit permissions

   • Check or uncheck topics to allow or restrict access.

   • For topics with sub-permissions (e.g., Reports or Requests), click the counter to select which actions within that topic are allowed.
     
     

Tips or troubleshooting

• Carefully review granted permissions; allowing unnecessary access may compromise security and confidentiality.

• If a user does not see a module, check if the corresponding permission is unchecked.

• Use combinations of permissions and sub-permissions to align access with each role's responsibilities.

Best practices

• Keep only the necessary permission levels; avoid creating redundant profiles.

• Review permissions periodically, especially after organizational structure changes.

Frequently asked questions

1. Can I grant access to view a module only, without allowing edits?
   Yes. Uncheck the edit or create options and keep only the view option checked.

2. What does the counter (for example, 2/3) next to a topic mean?
   It indicates how many sub-permissions are enabled. Click the counter to adjust each action individually.