Custom Access Levels: What this Access Level Can Do

What permissions can I grant in the What this Access Level Can Do section?
Purpose: This guide outlines the specific actions a user can perform within BambooHR after being granted access through a custom access level. Understanding these permissions helps you define what a user can do within your account.
Table of Contents:
What this Access Level Can Do
The What this Access Level Can Do section is where you an designate permissions for a user to do on behalf of your account or on behalf of other employees.

Here are the custom access level permissions you can grant for the Files section of BambooHR:
-
Upload Files: Gives the user access to be able to upload files in BambooHR.
- To complete this access, you must also grant the user Edit access to at least one specific folder. If a user does not have Edit access to any folders, they will not be able to upload any files.
- Request E-Signatures and Set Up Templates: Grants the user the ability to create signature templates, request e-signatures for employees they have access to, and access to the Signed Documents report. To use this feature, the user only needs View Only access to folders.
-
Allow access to these Folders in Company Files: You can grant either View Only or Edit access to specific folders.
- View Only access grants the user the ability to preview, download, and email a file within the folder.
- Edit access grants the user the additional ability to share, rename, and delete a file within the folder.

Here are the custom access level permissions you can grant for the Employees section of BambooHR:
- Add New Employees: Grants the ability to add new employees via the "+Add Employee" button. This permission also allows the user to rehire terminated employees they have access to. It's important to note that this permission does not automatically grant the ability to view the new employee's profile.
- End Employments: Provides the user with the ability to terminate any employee they have permission to access. When an employee is terminated, they lose access to BambooHR.
- Power Edit Employees: Enables the the Power Edit Employees feature, allowing for bulk updates to employee information. The user can only make changes to fields and for employees they have access to.
- Change Employee Photos: Gives the user the ability to upload photos for all employees they have access to. You can also grant employees permission to upload their own photo.
- Download Employee Forms: Allows the user to download W-4, I-9, and 1095-C forms via the action menu on the People tab (for employees they have access to). These forms will automatically include basic information for the selected employees.
Here are the custom access level permissions you can grant for the Hiring section of BambooHR:
- Manage Job Openings, Talent Pools, and Candidates: Grants full access to all information in Applicant Tracking. This includes creating and editing job openings, managing candidates, and exporting basic candidate information.
- Send and Manage Offer Letters: Allows the user to create offer letter templates and send offer letters to applicants. This permission requires both Manage Job Openings, Talent Pools, and Candidates and access to "Hiring" under Settings to create offer letter templates.
- Purchase Premium Job Ads: Provides the user with the ability to purchase and post paid job ads to various job boards. This permission also requires Manage Job Openings, Talent Pools, and Candidates.
Here are the custom access level permissions you can grant for the Payroll section of BambooHR:
- Run Payroll: Grants the user the ability to start, edit, or delete a payroll run.
- Approve Payroll: Allows the user to approve a payroll run. This permission requires the user to also have the Run Payroll permission.

Here are the custom access level permissions you can grant for the Reports section of BambooHR:
- Create New Reports: Allows the user to create a new custom reports. Users will only be able to include fields and employees in their reports that they have permission to access.
- View Payroll Reports: Grants access to BambooHR Payroll reports on the Reports tab. This permission does not include the ability to run or approve payroll.

Here are the custom access level permissions you can grant to for the Security section of BambooHR:
- Manage Employee Access Levels: Allows the user to grant, change, or disable an employee's access. The user can move employees between existing access levels but cannot give them additional permissions.
- Reset User Passwords: Grants the user the ability to reset passwords for employees they have access to. The user resetting the password cannot choose the new password.
- Reset User 2-Step Login: Provides the user the ability to reset an employee's 2-Step Login through Settings > 2-Step Login or the employee profile.

Here are the custom access level permissions you can grant to for the Time Off section of BambooHR:
-
Manage Time Off Policy Assignments: This permission requires the user to also have View or Edit access to the specific time off categories they will be managing. With this access, the user can perform three key actions:
- Record Time Off: Manually add and automatically approve time off requests for employees.
- Manual Adjustment: Manually add or subtract an employee's time off balance.
- Assign Policy: Assign a new time off policy for accruals or remove an existing one.
- Edit Past Time Off Requests: Allows the user to edit time off requests that have a start date in the past. This permission is only available if Manage Time Off Policy Assignments is enabled and the user has Edit access to the relevant time off category.
For more information about the Time Off feature permissions, check out this video and refer to the "View vs. Edit Access to Time off" section below.

Here are the custom access level permissions you can grant to for the Time Tracking section of BambooHR:
- Approve Timesheets: Grants the ability to approve any timesheets that the user has permission to view.
- Enable/Disable Time Tracking for Employees: Allows the user to add or remove employees from the Time Tracking feature. Users with this permission can also manage any BambooHR Time Clock or Time Clock Plus devices tied to your account, and set up the BambooHR Time Kiosk app.
- Manage Hours Imports: Provides the user the ability to add, edit, or delete hours via the Hours Importer or Hours API.
- Manage Project Tracking: Gives the user access to create projects and tasks and to assign or remove employees from them.
- Manage Shift Differentials: Allows the user to create and assign shift differentials within time tracking settings.
For more information about View vs. Edit access to Time Off, click here!

Here are the custom access level permissions you can grant for BambooHR Settings:
- Approvals: Grants administrative access to set up and manage the workflow for approvals. This includes defining who approves employee information updates, time off requests, and custom approvals.
- Benefits: Allows for the administration and adjustment of benefit plans and their settings, including access to the bulk enrollment tool.
- Company Field Settings: Provides the ability to add, edit, or remove values for standard list fields (e.g., Job Titles, Departments) and custom employee fields.
- Company Holidays: Grants administrative control to set and modify company holidays, which are displayed on the company calendar and the Who's Out widget.
- Email Alerts: Enables the user to set up and modify automated email alerts that are triggered by specific dates and events within BambooHR.
- Hiring: Allows the user to manage and customize settings for Applicant Tracking, such as Candidate Status list options and email templates.
- Logo & Color: Grants administrative control to change the accent color and logo for the company account.
- Offboarding: Provides the ability to make changes to the offboarding template and its associated settings.
- Onboarding: Provides the ability to make changes to the onboarding template and its associated settings.
- Performance: Grants the ability to create, edit, and delete performance review cycles.
- Payroll: Gives the user access to the Payroll tab within Settings, where they can add and manage General Ledger codes in the Journal Entry section. Full access to all Payroll settings is automatically granted to the Account Owner, Full Admins, and Payroll Admins.
- Time Tracking: Grants full administrative access to all settings and configurations for Time Tracking.
- Time Off: Allows the user to set up and manage all administrative aspects of time off, including creating categories and defining policies.
- Training: Provides administrative control to set up and manage training requirements found on the employee's Training tab and the My Stuff widget.
- Translations of Custom Fields: Gives the user the ability to manage and update translations for custom tabs and fields.
- Webhooks: Grants the ability to create and remove webhooks for integration purposes.