how to stop staff seeing colleagues salaries in HR software
The permission matrix, proved from two different logins 51s
Watch on YouTubeTranscript
Permissions down. Roles across. One cell, one decision. Grouped by module, and the edges stay pinned as you scan. This one row is the whole privacy question. Who may see what a colleague earns. The PRO may not. Search it. Or show only what you've changed. The CEO column is locked. Nobody edits it, ever. An admin can't grant what they don't hold, or edit a role above them. Now the same screen. Same address. Different person. There is no permission matrix here. There is one tab. And the settlement we watched compute an hour ago? Gone. Not blurred. Not greyed. Never sent to this browser. Same data. Same hour. Two people.
Frequently asked questions
How granular is the permission matrix?
Permissions down, roles across, one cell one decision, grouped by module with the edges pinned as you scan — searchable, or filtered to only what you changed.
Can an admin grant themselves more than they hold?
No — an admin cannot grant what they do not hold, nor edit a role above them, and the CEO column is locked so nobody edits it, ever.
What does the restricted role actually see?
Same address, same hour, different person: no permission matrix, one tab, and the settlement that computed an hour earlier is simply gone — not blurred, not greyed, never sent to that browser.
Watch next: Lend access while you travel instead of sharing a password