Every team member in Workstream is assigned a role, and that role determines what they can see and do — from managing job postings to processing payroll. This article breaks down exactly which permissions each default role includes, organized by feature area, so you can quickly check who has access to what.
📌 Access needed: To view or change role permissions, you need the Create and manage users permission. If you don't have access, contact your Super Admin.
📌 These are the defaults for Workstream's built-in roles. If a Super Admin has edited a role, its permissions may differ from this table.
💡 Looking to add a custom role or edit an existing one? See Add and edit roles and permissions. This article is a reference for what's included by default — not a how-to for making changes.
Account management
Permission | What it does | Included by default |
Create and manage users | Add, edit, disable, and reactivate user accounts | Super Admin, District Manager |
View sensitive applicant information: View partial details (last 4 digits of SSNs) | See the last 4 digits of an applicant's SSN | Super Admin, District Manager, General Manager |
View sensitive applicant information: View full details (background check reports and SSNs) | See an applicant's full SSN and background check details | Super Admin only |
View, create, and edit all HR calendars | Manage interview and availability calendars company-wide | Super Admin, District Manager |
Edit company info | Update career page branding, intro, industry, and FAQ; toggle Spanish hiring | Super Admin only |
Edit evaluation plan | Turn the Evaluation Plan on or off and edit its criteria | Super Admin, District Manager |
Create and edit integrations | Connect and configure third-party integrations | Super Admin only |
Manage API | Create and manage API access tokens | Super Admin only |
Manage locations | Add and edit locations and their tax entities | Super Admin only |
Manage departments | Add and edit departments | Super Admin only |
Customize notifications | Set up notifications for specific job postings | Super Admin, District Manager |
Create and edit custom reports | Build and manage custom reports | Super Admin only |
Create and edit custom fields | Add and delete custom fields | Super Admin only |
Job posting management
Permission | What it does | Included by default |
Create and edit job postings | Add or edit job posting details | Super Admin only |
Delete job postings | Remove a job posting entirely | Super Admin only |
Publish and unpublish job postings | Control whether a posting is live | Super Admin only |
Access sponsored job boards | Sponsor a job posting on paid boards | Super Admin, District Manager, General Manager |
Create and edit hiring process templates | Build and edit reusable hiring process templates | Super Admin only |
Create and edit job details templates | Build and edit reusable position templates | Super Admin only |
Applicant management
Permission | What it does | Included by default |
Create and edit applicant feedback | Add and edit applicant scores | All users |
Create and edit applicant notes | Add internal notes on an applicant's profile | All users |
Send texts and emails to applicants | Message applicants directly | All users |
Team management
Permission | What it does | Included by default |
Onboard new hires / edit onboarding processes and documents / manually mark modules complete | Start onboarding for new hires, edit onboarding processes and documents, and mark modules complete manually | Super Admin, District Manager, General Manager |
View sensitive worker information: View partial details (last 4 digits of SSNs) | See the last 4 digits of a team member's SSN | Super Admin, District Manager, General Manager |
View sensitive worker information: View full details (SSNs, DOBs) | See a team member's full SSN and date of birth | Super Admin only |
Import and delete workers | Bulk import team members or delete a team member record | Super Admin, District Manager, General Manager |
Edit worker records | Edit a team member's profile information | Super Admin, District Manager, General Manager |
Manage documents (Create, Edit, Archive) | Upload and set up document templates | Super Admin, District Manager, General Manager |
Assign company documents to active team members | Assign uploaded documents to active team members for completion | Super Admin only |
Viewing direct deposit information is a separate permission.
📌 Location and department visibility: Super Admins always see every team member. Other roles only see team members in their assigned locations and departments, unless the role has View worker information for all locations (basic details only for unassigned locations and departments). With that permission, the role can see everyone, but only basic details for locations and departments it isn't assigned to.
Payroll management
Permission | What it does | Included by default |
Configure Payroll | Set up tax entities and enroll the company for payroll | Super Admin only |
Manage Payroll Operations | Access the payroll portal — run payroll, view payroll documents, download reports | Super Admin only |
Access to manage all tax entities (checkbox) | Choose whether a payroll user can manage all tax entities or only specific ones. Set alongside Configure Payroll and Manage Payroll Operations. | Super Admin only |
💡 For the full walkthrough on assigning these, see Assign Payroll setup and management permissions. For giving a manager scoped access to just their direct reports' pay, see Assign managerial permissions to users.
Surveys
Permission | What it does | Included by default |
Create and send surveys | Build and assign surveys to the team | Super Admin only |
View and download survey results | Access and export survey results | Super Admin, District Manager, General Manager |
Data export
Permission | What it does | Included by default |
Manage data export template list | Create export templates | Super Admin only |
Manage data export files | Access exported data files | Super Admin only |
FAQ
Can I change what a role has access to?
Yes. These are the defaults for Workstream's built-in roles. A Super Admin can edit any role's permissions, or create a fully custom role. See Add and edit roles and permissions for steps.
Why can't I see the "Assign company documents" option even though I'm a General Manager?
That permission isn't included in the General Manager default — only Super Admin has it out of the box. A Super Admin can add it to your role if needed.
Does the Assistant Manager role have any Team management or Payroll access?
Not by default. Assistant Manager is scoped to applicant management only (feedback, notes, and messaging applicants).