Roles & access control

A two-stage model: what each role can see, and what it can do.

Access is role-based in two stages: first what a role can **see** (which menus and sections), then what it can **do** within them (view, create, approve, and so on), mapped to your organisation structure.

Vintage ships sensible roles — Super Admin, Payroll Admin, Payroll Officer, Approver, HR Admin, Accountant, Read-only — and you can clone any of them and adjust the permission matrix. Managers can be scoped to just their own team.

Related articles