Team access

Team access is where you choose which departments and employees each SolaHR teammate works with. In Solavel you give a teammate a SolaHR role, which sets what they can do. In SolaHR you choose their scope, which sets who they can do it for.

A teammate with a scoped role sees no one until you assign them at least one department or employee.

Where to find it

• SolaHR sidebar: System → Team Access. URL /team-access. Shown to Owners and SolaHR Administrators.
• From Solavel: on Team, a member's SolaHR chip has a small arrow, and the member's actions include Manage HR permissions. Either one opens SolaHR with that member's access already open (/team-access?member=…).
• An HR Manager (scoped) doesn't see Team access in the sidebar. They use Manage HR permissions in Solavel, which opens a Permissions page in SolaHR for that one member (/member-management/{organization}/{member}). The rules are the same as on this page.

Roles and scope at a glance

SolaHR roles are given in Solavel when you invite or edit a member (see Application roles). Here is what each role means in SolaHR:

Allowed actions per role

These are the most each role can be given. On this page you can turn actions off, but never above the role.

Role presets you can choose in the panel

The Role list in the panel only offers presets that fit inside the member's Solavel role:

When you save, the ticked actions must fit inside both the Solavel role and the preset chosen in Role. For example, if you set an HR Manager to the Department Manager preset and then tick Manage teammates' access, the save is refused, because that action is not part of the Department Manager preset.

What scoped members see

Scoped members (HR Manager, Department Manager, Attendance Recorder, HR Viewer) don't get the full SolaHR menu. They open a focused workspace (/operations) that lists the employees in their scope, with the attendance, leave and report tabs their actions allow. The day states there are the same as the daily roster (Attendance). Attendance can only be recorded for today. A Department Manager or HR Manager who reviews leave can open the request's attachment for employees in scope, and a Department Manager can complete the onboarding tasks owned by "the manager" for their own reports. Any other SolaHR page is refused.

A scoped role doesn't remove self-service. If the person is also an employee, they still have My Portal for their own payslips, leave, timesheets and documents. See Getting started.

Role guide: access and restrictions

Because role names alone do not say enough, the Team access page and the edit panel both explain every role in plain words. The guide is titled Role guide: access and restrictions and opens with: "These are the role limits. A member's saved actions, selected employees and departments, and any restrictions in Solavel can reduce their access. A role name alone does not guarantee every action below."

Each role has a card with three parts: Can access and do, Cannot do and Which employees?. A callout adds the payroll exception: "an Organization owner or SolaHR Administrator can explicitly grant individual payroll actions to an HR Manager. These actions expose payroll and payslip data across the whole organization, beyond the assigned departments or employees. They are not included by default." A closing line reminds readers that "Employee self-service is separate. A member with a linked employee identity can use their own permitted self-service features; being an employee does not grant access to other employees or HR administration."

"Which employees?" reads, for scoped roles, "Only employees in the assigned departments, plus individually selected employees. New department members are included automatically. With neither assigned, no employees are visible."; for Owners and Administrators, "All employees in the selected organization. No department or employee assignment is required here."; for older roles, "Organization-wide access under the older role's permissions; the department and employee selections here do not restrict this role. Change the role in Solavel to use scoped access."

The card of the role you are editing also appears at the top of the Access for panel (compact), laid out in an aligned, responsive comparison so the Can and Cannot notes stay visible on a phone.

The Team access page

The header reads Team access — "Choose which departments and employees each member works with". Under it, a How access works box explains:

• "The role — what a member can do — is given in Solavel when you invite or edit a member."
• "Here you choose which departments and employees each member works with. Members see no one until something is assigned."
• "A member appears here after opening SolaHR for the first time."

The table lists every active member of the organization who can open SolaHR:

If nobody else uses SolaHR yet, you see "No other members use SolaHR yet".

Assign departments and employees

1. Make sure the member has a scoped SolaHR role in Solavel and has opened SolaHR at least once.
2. Go to System → Team Access and click Edit access on their row. A side panel opens, titled Access for name.
3. Role — this starts as the role given in Solavel. You can choose a lower preset (for example, set an HR Manager to work as a Department Manager here). Under it: "Limited to the role given in Solavel. To give more, change the role there."
4. Allowed actions — read the role card under Role, then tick or untick actions. Actions above the Solavel role are greyed out. Changing Role resets the ticks to that preset.
5. Departments — "Everyone in these departments, including people who join later." Use Search to filter and tick each department. The counter shows "n selected".
6. Individual employees — "Add people outside the chosen departments." Search by name or employee number and tick each person.
7. Payroll access (only in some cases, see below).
8. Click Save in the panel footer, or Cancel to close without saving.

You see Access saved, the panel closes and the Works with column updates. The member's next page load uses the new scope. Each save is recorded with a before and after copy of the member's access.

The member's scope is the employees in the ticked departments plus the individually ticked employees. Moving an employee into a ticked department brings them into scope automatically. Moving them out removes them, unless they were also ticked individually.

Payroll access for an HR Manager

Payroll is never part of a scoped role by default. The Payroll access box ("Salary and payslip data for the whole organization. Not included in HR Manager.") appears only when all of these are true:

• you are an Owner or SolaHR Administrator,
• the member's role in Solavel is HR Manager, and
• Role in the panel is still HR Manager.

Tick only what they need: View payroll runs, Create payroll runs, Approve payroll runs, Lock payroll runs, Reopen closed payroll runs, View payslips, Generate payslips, Print/export payslips, Manage payroll settings, Manage payroll currencies and exchange rates.

Payroll access covers the whole organization, not just the member's departments. When you grant it, the member can also open the Payroll and Payslips pages. If you switch Role to anything other than HR Manager, the payroll ticks are cleared.

Delegation rules

Nobody can edit:

• their own access,
• an Owner or SolaHR Administrator (they always have Full access), or
• a member on an older role. Change the role in Solavel to one of the new roles first. Older roles are never converted automatically.

Trying anyway is refused with "You do not have access to this action. Contact your workspace administrator." If the role was removed in Solavel in the meantime, the panel shows "This member's access cannot be edited here."

The Permissions page (for HR Managers)

An HR Manager with Manage teammates' access manages access from Solavel: Manage HR permissions on a member opens a SolaHR page titled Permissions — "Manage HR permissions — name", with your organization name under it.

Click Save permissions and scope. On success the page shows Permissions saved. at the top; on failure the first problem is shown in red. There is no Payroll access section for HR Managers.

If the member is on an older role, the page shows "Legacy HR assignment retained, including its existing payroll access. Select a new safe HR role in Central before configuring scoped access here." and no form.

When an Owner or SolaHR Administrator follows the same Manage HR permissions link, they are taken to this Team access page with the member's panel already open.

Statuses of a member's access

Messages you may see

Quick example: a new attendance recorder

1. Al Noor Trading LLC hires Hamad Ali to record check-ins at the Dubai Main warehouse. The owner invites him in Solavel as Attendance Recorder.
2. Hamad opens SolaHR once; his row shows Nothing assigned — sees no one.
3. The owner clicks Edit access, ticks the Warehouse department, keeps View attendance and Record attendance ticked, and clicks Save. Access saved appears and Works with shows Warehouse.
4. Hamad reloads and sees the 18 warehouse employees in his workspace. He can mark today's attendance only; yesterday is refused.

Worked example: a department rollout

Al Noor Trading LLC has the departments Sales, Warehouse (Dubai Main) and Finance.

1. In Solavel, the owner invites Layla Mansour as HR Manager, Omar Haddad as Department Manager and Yousef Karim as Attendance Recorder.
2. Each of them opens SolaHR once. Their Team access rows show Nothing assigned — sees no one.
3. The owner opens System → Team Access and sets:
   • Layla: Departments Sales and Warehouse. Payroll access: View payroll runs and View payslips.
   • Omar: Departments Sales. Individual employees: 1007 — Rania Saleh (Finance, but she reports to him).
   • Yousef: Departments Warehouse. Allowed actions keeps View attendance and Record attendance.
4. Result: Omar sees the Sales staff plus Rania and can review their leave. Yousef can record today's check-ins for warehouse staff only. Layla runs HR for Sales and Warehouse and can view payroll for everyone.
5. Later Layla opens Manage HR permissions for Omar in Solavel and adds Warehouse. That works because Warehouse is in her own scope. She couldn't add Finance.

Tips and common problems

• The member isn't in the list. They must be an active member with SolaHR access and must have opened SolaHR once.

• "Nothing assigned — sees no one". This is by design: an empty scope means no employees. Assign at least one department or employee.

• An action is greyed out. It's above the member's Solavel role. Change the role in Solavel (Team).

• No Edit access button. The row is an Owner, a SolaHR Administrator, yourself, an older role, or outside what you may delegate.

• Wanting SolaHR-wide control without making someone an Owner. Give them SolaHR Administrator in Solavel.

• Being on the employee list in a department never grants access by itself. Access always comes from a role plus an explicit scope.

• Saving is refused after changing Role. Untick actions that are not in the chosen preset, then save.

• Payroll access box missing. It only appears for an Owner or SolaHR Administrator editing a member whose Solavel role is HR Manager with Role still HR Manager.

• Where are changes recorded? Each save is stored with a before and after copy, and the request appears in the Audit Log.

• To block someone entirely, disable their account in Admin Users rather than emptying their scope.

Related

• Team (Solavel)
• Application roles (Solavel)
• Settings
• Admin Users
• Audit Log
• Departments & job titles
• Attendance
• Leave
• Payroll
• Getting started