Partner Dashboard - User Access Management

You can manage user access at the partner, brand, or business level within the partner dashboard, provided you have partner-level access. Additionally, the user access page allows you to see which users have 2FA set up.

The information below will show you how to add and revoke users at a partner, brand, and business level.

Add/revoke user access at a partner level

To add or remove users at a partner level, you must have partner-level access. To add, click the 'Add' button. To revoke access, click the 'Actions' dropdown, then click 'Revoke'.

Any user added as a partner will also be given access to the Bureau dashboard.

NB: If you are a user with brand level access you will not be able to add/revoke user access at a partner level.

Add/revoke user access at a brand level

If you want to remove a user's access to a brand, you need to log into the brand settings. You can do this from the partner dashboard by clicking the brand management tag.

NB: Only users with partner-level access can add and revoke users from a brand. However, users with brand-level access can add another brand-level user. 

Both brand managers and partner access users can add a user by selecting the 'Add' button (they will be given brand access) and revoke a brand user from this page by selecting the 'Actions' button, then clicking 'Revoke'. You cannot revoke access for a user with partner access.

You can also send them another activation email, which will allow them to reset their login password. Click the 'Actions' dropdown, then click 'Resend Activation Email'.

If you are a brand-level user, on the right-hand side, you will only see an 'Add' option:

If you are removing a user's brand access, they will no longer be able to access any business under that brand, unless they have been given access to an individual business. This is done by going into a business and clicking on the Payroll settings > Manage users page. 

Add/revoke user access at a business level

From the partner dashboard home page, type in the name of the relevant business. You'll then need to click on the name, and navigate to the 'user access' link:

 

The list of users shown are those users that have access to the individual business, and have been added to the 'Manage Users' page.

In order to remove the user's access to the business, click on the 'Revoke' button shown against their name:

 

Once you remove their access that business will no longer show on their dashboard and they will not receive any notifications relating to it. 

If you want to add a user to a business, add the user directly into the Payroll settings > Manage users page from there. 

You can also see a quick view of user security by going to the Payroll settings > Security dashboard page.

Impersonate a user

The Impersonate option in the Partner Dashboard lets you log in as one of your customer's users to see exactly what they see. This is useful for troubleshooting issues reported by your customers - you can investigate the problem first-hand without needing to raise a support ticket.

NB: Impersonation is available to partner admins and brand admins only. You can only impersonate users within the businesses that belong to your brand.

To impersonate a business user (Business Admin, Restricted Access Employee, or Employee):

1. From the Partner Dashboard, search for and select the business you want to investigate.
2. Open the User Access tab.
3. Click the Actions dropdown next to the user you want to impersonate.
4. Click Impersonate.
   
5. A confirmation prompt appears. It shows the instructions for returning to the Partner Dashboard and how many impersonations you have used today out of your daily limit of 10.
   
6. Click the Impersonate button. You will be taken into the payroll platform as that user.

Where you land depends on the user's access level:

• Business Admin → payroll admin view
• Restricted Access Employee (Manager) → manager home page
• Employee → employee self-service home page

1. To find an employee with self-service-only access: Tick Include ESS-ONLY employees on the User Access tab, enter the employee's email address or Employee ID in the search field, and click Search. The matching employee appears in the list with an Impersonate option.
2. To impersonate a brand admin: Go to Brand Management, select the brand, open the Admin Access tab, then click Actions next to the user and select Impersonate.
3. Returning to the Partner Dashboard: Click on the user menu in the top-right corner and select End Impersonation. This ends the impersonation session and returns you to the Partner Dashboard.
4. Daily limit: You can impersonate up to 10 users per day. The confirmation prompt shows how many you have used today. Once you reach 10, the Impersonate option is disabled until the following day.

Common use scenarios of user impersonation

• A customer cannot view their pay slips: Impersonate the employee to see their self-service portal and confirm what the issue is.
• A business admin reports an error when processing a pay run: Impersonate them to replicate the issue first-hand.
• A restricted access employee (manager) says leave approvals are not appearing: Impersonate them to see their manager dashboard.

NB: If you are attempting to impersonate another Partner access user, this will not be possible due to security reasons.