Understanding roles and permissions

How role-based access works in Dapplon

Every user in Dapplon is assigned a role. The role determines which modules they can access, which records they can view or edit, and which actions they can take. Roles are scoped per panel — the same person can have different roles in the admin panel and the job portal.

Built-in roles

Super Admin — unrestricted access to all modules including billing, settings, and role management. Assign this only to the primary IT or HR owner.

HR Admin — full access to employee management, payroll, leave, attendance, recruitment, and reports. Cannot change billing or system-wide settings.

HR Manager — can view and edit employees in their assigned department only. Can approve leave for their team. Cannot access payroll details of other departments or run payroll.

Recruiter — access to the Recruitment module only. Can post jobs, manage candidates, schedule interviews, and send offer letters. Cannot view salary data.

Finance — read-only access to payroll reports, cost reports, and invoice downloads. Cannot edit employee profiles or run payroll.

Employee (Employee Portal role) — can view their own profile, payslips, and leave balance. Can apply for leave and submit expense claims. Cannot see any other employee's data.

Checking what a role can do

1. Go to Settings > Roles & Permissions
2. Click on any role name to see the full permissions matrix
3. The matrix shows each module with the access level: None, View, Edit, Full Control

Creating a custom role

1. Go to Settings > Roles & Permissions
2. Click Create Custom Role
3. Name the role (e.g., "Payroll Specialist")
4. In the permissions matrix, set access for each module
5. Click Save Role
6. Assign the role to users under Settings > Users