How to update the roles, permissions and scope of an employee on Keka?

Keka offers various levels of access to the portal which can be assigned to employees, enabling them to access the features on the portal they are responsible for. The default roles are Listed below in the descending order of access level –  

Other Roles

• Payroll Admin 
• Expense Manager 
• Performance Admin 

Here’s how you can assign these roles to employees. 

Go to Global Settings (1) and select the Roles and Permissions tab (2) from the left pane. On the User Roles tab, you'll see a list of roles that have been preconfigured on Keka. You can view current assignments, assign employees to roles and also remove role assignments from here. You can also create custom roles with defined access and permissions from here. To assign a role to an employee, select your desired role and click on Manager Users (3).

In the Manage Users window, you can add users to the role as you wish. You can also define a specific scope and define a user role for that scope. The scope could be a department, business unit, legal entity, location, or pay group. To add scope to the role, click on +Add New Scope. 

Define the scope as you wish. Search for employees you want to assign the role to from the right pane.

After you've added the desired scope and also added the employees, click Save.

Going forward the employee will be logging in to an updated interface where he’ll be able to work on the new privileges granted as per the role assigned. 

If you wish to further manually customize the privileges of the assigned role Do click on the Edit icon.

In the Update Role window, you can use the checkboxes to change the permissions that have been assigned to the role. You can see the permissions across the various features as well. Choose a feature from the left pane and you can select additional permissions for the role from here. 

Once you have made the necessary changes to the permissions, click Update to finish. 

These updated privileges will then be visible to the assigned employee. The employees assigned to these roles may have to log out of the portal and log in again to see the changed permissions on their profile.