Role Management

• Supported Actions
• Permissions
  • Action Permissions
  • View Permissions
• Steps to Update a User’s Role
• Assign Users to a Role
• Manage Product Access by Role
• Bulk-Add Users to Roles
• FAQ

Supported Actions

• Assign Users to a Role
• Manage Product Access by Role
• Bulk-Add Users to Roles

Role management lets account admins assign Pave roles to users within their company, and control which products each role has access to at any point in time.

Permissions

Roles comprise a set of permissions which determine what employees with the role can access & do in Pave.

Contact our Support team or your Pave Implementation Manager to change the permissions for a role.

Action permissions

Define what a user can do using a given feature.

• • view: Gives read-only access to the feature
•  
  • edit: Gives edit access to the feature for users to make updates/ changes to the feature

View permissions

Define who a user can see within a given product or feature.

• • themselves: Can only access themselves in the feature
•  
  • directReportsOnly: Can access their direct reports (anyone who reports directly to them). In the Total Rewards portal, this view also includes viewing themselves.
•  
  • reportsOnly: Can access everyone beneath them in their reporting line (anyone who reports directly or indirectly to them). In the Total Rewards portal, this view also includes viewing themselves.
•  
  • custom: Can access a custom group of employees as defined by department, the direct reports or reports of an individual, specific employees, or location.
•  
  • all: Can access every employee in the company

Steps to Update a User’s Role

1. Review the permissions included in the given role to confirm that the permissions & access provided by the role match the access you wish to give the employee
2. To confirm that the role is the right fit for this user, you can Impersonate a User in this role to preview the access provided by the role
3. Add the user to the desired role & save your changes
1. You can always Impersonate the user once you’ve updated their role to confirm the updates made to their access

Assign Users to a Role

1. From Settings, navigate to the Roles & Permissions tab. Select the desired role from the Roles menu:

2. Review all Pave products that are enabled for this role to confirm this is an appropriate role for the employee(s) you wish to add:

3. Expand the list beneath an enabled product to review the permissions settings for each product:

4. Click on Users, then ‘Add Users’:

5. Add users by email to the Add Users module. You can search employees by name or paste a list of comma-separated emails:

6. Save your changes. A green toast notification will confirm your update was successful:

Manage Product Access by Role

Product-area access can be controlled on a role level by enabling/disabling the blue toggle for a product as shown below:

Once you enable a product toggle, expand the dropdown to view the role’s current permission settings.

If you’d like to adjust the permission scope within a product area for a certain role, contact our Support team or your Pave Implementation Manager to make changes before assigning users to the role.

Remember to Save all desired role changes.

Bulk-Add Users to Roles

To add multiple users to a role, copy & paste a comma-separated list from Excel or Google Sheets into the Find users to add field.

To do this you will need to create a workbook in Excel or Google Sheets with all of the emails in a column. In the column next to it, you will need to add a formula to concatenate the email with a comma, like below: 

(Formula is =CONCAT(CELL,",") )

After that, drag down the formula so you see every email with a comma after it, like below: 

The last step is to copy that column of emails with the commas and paste that into the Find users to add field for the specific role. 

If this is successful you will see all of the employee emails listed in gray boxes like the photo above.

Important: Note that by adding a group of users to a role, you are removing these users from any previous role they had prior. Contact our Support team or your Pave account team to create a custom role if needed.

FAQ

Can a user have more than one role at a time?

• No – users can only be assigned to a single role. By changing a user’s role, you will remove the previously-assigned role.
• To combine the permissions of two roles, contact our Support team or your Pave Implementation Manager.

How do I add multiple users to a role at once?

• Users can be bulk-added to the same role by pasting a list of comma-separated emails into the Find Users to add field.

How can I view Pave as another role?

• You can impersonate other users to view Pave from the perspective of their role.

How can I change the permission settings for a role?

• Contact our Support team or your Pave Implementation Manager to change the permissions for a role.

How can I create a new role?

• Contact our Support team or your Pave Implementation Manager to set up a new role.