🛡️ DaaI Business Suite comes with two system-generated default roles. These roles are created automatically during installation and cannot be removed or edited by any user — including the Super Admin. Depending on your subscription plan, you can assign these default roles to employees within the limits of your allowed user count.
1️⃣ Basic Employee Access
✅ Purpose:
Assigned to regular employees to provide limited self-service access only to their own records. This is also the role that the system falls back to for any active user with Is Employee = true when no role is explicitly assigned.
✅ Access & Permissions Included:
| Module / Section | Access Type |
|---|---|
| Dashboard | View |
| Holidays | View |
| Announcements | View |
| HRM – Employee Module | View own profile (Read Only) |
| Timesheet Module | View own timesheets (Read Only) |
| Leaves Module | Apply Leave + View own leaves |
| Salary Module | View own salaries and payslips (Read Only) |
✅ Key Notes:
- Employees cannot see or modify any other user’s information.
- This role ensures employees have basic access to personal records and can perform actions like applying for leave.
- It is granted automatically as the fallback role when an employee user is created without an explicit role.
2️⃣ Super Admin
✅ Purpose:
Reserved for system administrators requiring full unrestricted access across the entire application.
✅ Permissions Included:
- All modules and all actions (Create, Read, Update, Delete, Reports, Approval, Configuration).
- Complete system configuration and maintenance.
- User and role management.
✅ Key Notes:
- The Super Admin role is the highest authority in the system.
- Should be assigned only to trusted system administrators.
🔒 Restrictions on Default Roles
These two roles are mandatory system roles and:
- ❌ Cannot be edited
- ❌ Cannot be deleted
- ❌ Cannot be renamed
- ❌ Cannot be hidden from the system
These roles guarantee that every tenant has at least one fully empowered admin role and a safe self-service role for employees, even if all custom roles are accidentally deleted.
🧩 Custom Roles
Any additional roles you create yourself can be customized freely — fully editable, deletable (when unassigned), and combinable with others on a single user. Basic Employee Access and Super Admin will always remain in the system for operational consistency.