Let a manager add people without changing permissions

Manage employees within the company lets a manager add people and look after them. Can change employees' permissions decides whether they may also change what those people are allowed to do. Give a manager the first and not the second, and they can run the team without touching anyone's access.

Where the switch is

Open a person's window on the Users page, then the Permissions tab. Can change employees' permissions sits right under Manage employees within the company, in the Admin card. Administrators always have it.

With Manage employees only

The manager can:

• add people with New user — the new person starts with the default permissions of the department picked for them
• change anyone's name, contact details, address, positions, branches and Active switch
• change their Payroll, Signature, Notifications, Auto Assignment and mailbox

They can't change anyone's Permissions, User Type or Department (a department brings its own set of permissions). Those parts of the person's window are greyed, with the line Changing permissions needs "Can change employees' permissions". They also can't change a department's default permissions in Group Settings or put them back onto the department's people. If they try anyway, nothing is saved and they see Changing a person's permissions, user type or department needs "Can change employees' permissions". Ask an administrator.

With both

The manager can change permissions, user type and department too, within the usual limits: never their own access, never an administrator's, and only permissions they hold themselves. See What a non-admin manager can change.

On the day it arrived

Everyone who already had Manage employees within the company was given Can change employees' permissions too, so nothing changed for anybody. To limit a manager, turn it off on their Permissions tab and press Save.

Finding the Users page

Anyone with Manage employees within the company has Users in the menu under their name (top right, or the ⋮ menu on a phone). It opens the whole team list, even for someone who can't open Settings. Administrators can also go through Settings › Users & permissions › Users.