Role-Based Access Control for Employee Monitoring

Not everyone needs to see everything. Assign roles so each person has the access their job requires, and nothing more.

RoleCan see
Organization adminEverything in the organization, including settings and billing
ManagerTheir own team: direct reports and the departments they head
EmployeeOnly their own My Report and Profile

The Right Access for Every Role

Simple roles that match how organizations actually work.

Organization admins

Admins manage the organization: employees, departments, devices, reports, settings and billing.

Managers

Managers see their own team: their direct reports and the departments they head.

Employees

Employees see only their own My Report and Profile, never anyone else's data.

Full Access or View Only

Not every administrator needs to change things. Give an administrator View only access so they can see everything but change nothing, which suits auditors, executives or reviewers. View-only administrators can still manage their own password and two-factor sign-in.

  • Full access: can view and change everything
  • View only: can see everything, change nothing
  • Change an administrator's access at any time
Go to Employee and Team Management

Access

Full access

Can view and change everything

View only

Can see everything, change nothing

Manage Administrators Easily

Invite an administrator with their name, email and access level. The Administrators page shows each person's status, access, two-factor status and last login, and lets you deactivate, reactivate or delete them.

Go to Security and Privacy
Demo organization data
The Administrators page showing each administrator with their access level and two-factor status

What Managers Can Do

Managers can review the dashboard, employee details, devices and reports for their own team, and see notifications. They cannot add or edit employees, issue enrollment codes, revoke devices or change settings.

Go to Reports and Exports

Dashboard

Organization-wide active/idle overview for the last 7 days.

Total employees

Active now

Idle now

Offline now

Total active time

Total idle time

Employee status

EmployeeStatusActive timeIdle timeLast activity
Active
Idle
Offline

Strict Separation Between Organizations

Every request is scoped to your organization. Nobody, in any role, can see another organization's data, and your data is never visible to anyone outside it.

Your organization

Your data only

Another organization

Never visible to you

More Features for Safe Access

Security and Privacy

Protect administrator accounts with two-factor sign-in.

Two-factor authentication

Enabled

Adds a 6-digit code from an authenticator app to every sign-in.

Go to Security and Privacy

Reports and Exports

Employees get their own My Report, showing only their data.

My Report

Your own activity summary, timeline, and duty hours.

OverviewTimelineDaily report

Punch In

Punch Out

Days Worked

Tracked Time

Active Time

Idle Time

Go to Reports and Exports

FAQ

Organization administrators, managers and employees.

Least Privilege, by Default

Chat with us