Assign a User to Multiple Access Levels
How do I assign a user to multiple access levels?
Purpose: We understand that access to employee information might not be as straightforward as you would like it to be. Sometimes, a user will need a manager access level to view specific information of all of their direct reports and a custom access level to update training for all employees. Don't worry. We have you covered with our multiple access levels. This guide will help you understand how to give a user access to more than one access level, so you can be sure they only see the information they need for each employee.
Employee profile
To assign a user to more than one access level, navigate to their employee profile and click on the three-dot icon in the top right corner. Hover over your cursor over BambooHR Access Level and select Multiple Access Levels... from the bottom of the list.
In the pop-up box, check the access levels you would like to assign to the user. Click Save, and the user will immediately have the appropriate access based on each access level.
You will notice that your employee access levels do not show up under the list. The employee access is built into the custom and manager access levels under the See about Themselves section in access level settings.
Please note that there are a few constraints regarding multiple access levels:
- A user cannot be in the Full Admin access level with any other level simultaneously.
- A user cannot be in more than one assigned employee access level.*
*It is possible for a user to belong to more than one employee access level simultaneously. If a user belongs to multiple custom access levels and each one has a different employee access level chosen under the See About Themselves setting, the criteria for each employee access level apply.
To assign a user to more than one access level simultaneously, navigate to Access Levels in Settings. If the user cannot access BambooHR, click + Add Employee to assign an access level to the user. If the user already has access, but you need to edit or change their access, hover your cursor over their name in the list and click on the action menu (person icon) and select Multiple Access Levels...
In the pop-up box, check the access levels you would like to assign to the user. Click Save, and the user will immediately have the appropriate access based on each access level.
Assign multiple users to multiple access levels
To assign multiple users to an additional access level, navigate to Access Levels in Settings. Select the access level you would like to add the users to and click +Add Employee.
In the pop-up box, click Add Many Employees. Under "Advanced Options," select Combine [Current Access Level(s)] with the access of [Access Level Name]. Then, select the employees you would like to add to the additional access level.
Don't worry. It is nowhere near this complicated. However, there are a few rules for when settings between multiple access levels come into conflict with each other:
- No Access to a specific field is trumped by View Only access.
- View Only access is trumped by View and Edit access.
- No Access to Management Abilities is trumped by Access to Management Abilities.
When do these rules come into play?
The rules for which access takes precedence only come into play when there is a conflict in granting a type of access that overlaps with a localized area of the specific conflict (this takes into account who you can view and which fields you can view with their respective settings).
For example, if Bob belongs to two levels as they follow:
- Level 1: Access to view all information on the Job tab for all employees.
- Level 2: Access to view and edit the Compensation table data only for his direct reports on the Job tab.
These two custom access levels conflict because one allows for View Only access when the other allows for some editing capabilities. In this scenario, View Only access remains for all the fields on the Job Tab except for the Compensation table fields (where the conflict occurs). For those fields only, the higher access setting would apply while Bob would have editing rights to the Compensation table data. However, he would have that ability restricted to the employees who report directly to him. For all others, he would still be restricted to View Only access for the Compensation table data.