Security and permissions – Pl

This guide explains the different levels of user access available through performance leader, the key differences between them, and how to set them up.

Types of User Access

1. Regular User

Regular users have standard access to menu items and can have additional access for specific modules, such as external feedback.

Capabilities:

Can access same set of menu items across entire firm.

May have additional access for specific modules, such as external feedback or the ability to create plans.

2. Leadership View

Designed for firm leaders needing broader visibility, leadership views provide read-only access across specified cohorts (for example, all Partners in Litigation).

Capabilities:

Read-only access to data across specified groups. Scope can be further restricted by module (e.g. only feedback, objectives but not reviews).

Cannot make changes to the system or user data, but can add comments.

Each user can only have one leadership view. The title of the view can be customised (e.g. “Firm View”, “Practice Group View” etc)

A user can have a leadership view AND either Restricted OR Super admin priveleges.

3. Restricted Admin

Restricted admins, suitable for HR business partners or office managers, manage user data within a specific scope. They can't run imports or change system settings but can manage users, run reports, and adjust reviews within their scope.

Capabilities:

Can manage user data within a specific scope (e.g., departments, locations).

Limited system access; cannot run imports or change system settings.

Can manage users, run reports, and access tools (e.g. email campaigns, bulk objective creation or moving users up/down a review)

4. Super Admin

Super Admins have the highest level of access, with full control over the system. They can access all data, make changes to user information, module data, and system settings, and perform fundamental changes impacting all users.

Capabilities:

Access to all data across the system.

Can make changes to user information, module data, and system settings.

Can change the instance name, reconfigure module titles, and run imports.

Permission Matrix

Permission	Regular User	Leadership View	Restricted Admin	Super Admin
	Standard access, with module level permissions	Designed for firm leaders needing broader visibility beyond direct report	Ability to change data and manage experience of a specific scope of users	Highest level of access, with full control of the platform and all users
Access to Menu Items	✔️	✔️	✔️	✔️
Edit User Data	❌	❌	✔️	✔️
Run Reports	❌	❌	✔️ (limited to user scope)	✔️
Access Tools (e.g., email campaigns)	❌	❌	✔️ (all tools but limited to user scope)	✔️
Change System Settings	❌	❌	❌	✔️
Run Imports	❌	❌	❌	✔️
Full Data Access	❌	❌	❌	✔️
Access specific Roles, Departments or Locations	❌	✔️	✔️	❌
Access specific Modules (e.g. Feedback, Objectives or Reviews)	❌	✔️	❌	❌

Setting Up User Access

Set Super or Restricted Admin rights

Access the User Manager module.

Select User: Choose the user you want to assign special powers to.

Update Account Type:

For Super Admin: Toggle the "Super Admin" option and save.

For Restricted Admin: Toggle the "Restricted Admin" option, set the desired scope, and save.

Adjusting User Roles and Permissions

Navigate to Roles Section: Within the User Manager, go to the roles section of the user's profile.

Set Specific Permissions: Assign permissions for leadership views, feedback requests, etc.

Configure Leadership View Templates:

Go to Settings > Leadership Access.

Edit existing templates or create new ones to define the label and module scope.

Additional Information

Notification: Users do not receive email notifications when permissions are changed.

Audit: User access levels and scopes are included in employee data exports for auditing purposes.