> For the complete documentation index, see [llms.txt](https://help.marcopayroll.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.marcopayroll.com/marco-user-guide-x4/2025/marco-platform-structure/customer-portal/manager-guide/access-and-roles.md).

# Access and roles

* [Profile type](/marco-user-guide-x4/2025/introducing-marco-os/user-roles-and-profiles/profile-types.md)
* [Access privilege (for managers)](#manager-access-privileges)
* [Role assignment (for managers)](#manager-role-assignment)

***

### **Manager Access Privileges**

In **Marco**, managers can be granted different **access privileges**, which determine what they can **view** and **manage**.

All managers can be assigned one or more of the following **access privileges**:

* **Time Access**
* **Payroll Access**
* **Admin Access**

By default, **managers have no access privileges**. Only **Admin Managers** (managers with **Admin Access**) can grant or modify access privileges for other managers.

For instructions on how to assign privileges, refer to **Setting Manager Access Privileges**.

***

### **Default Access (No Access Privileges)**

By default, all managers can **only view their assigned staff**. Without additional access privileges, managers can:

✅ **Add and onboard new staff**\
✅ **View and edit basic staff information**, including personal and work details\
✅ **View staff leave balance and history**\
✅ **View staff expense records**\
✅ **View and manage staff documents**\
✅ **Manage staff relocation**\
✅ **View and manage staff visa applications**

**Restrictions:**\
❌ Managers with **no access privileges** **cannot** approve leave requests or expenses, **unless** they are assigned as the staff’s **Reporting Manager**.

***

### **Time Access**

Managers with **Time Access** (Time Managers) can **only view their assigned staff**. In addition to **default access**, they can:

✅ **Manage staff leave balance and records**\
✅ **Manage public holiday lists and weekend policies**\
✅ **Approve staff leave requests**

***

### **Payroll Access**

Managers with **Payroll Access** (Payroll Managers) can **only view their assigned staff**. In addition to **default access**, they can:

✅ **View and edit private staff information**, such as **bank details and employment contracts**\
✅ **Manage staff salary items**\
✅ **Manage staff insurance**\
✅ **Manage staff bank accounts**\
✅ **Manage staff expense records**\
✅ **Approve staff expenses**\
✅ **Run expense and payroll reports**

***

### **Admin Access**

Managers with **Admin Access** (Admin Managers) can **view all staff in the company** and perform all tasks available to **Time Managers and Payroll Managers**.

#### **Admin Managers can also:**

✅ **View, manage, and edit all staff information**, including personal details, bank accounts, salaries, expenses, leave, relocation, and more\
✅ **Manage company documents, agreements, and quotations**\
✅ **Assign managers and vendors to staff**\
✅ **Set profile types and manager access**\
✅ **Change staff Marco account emails**\
✅ **Offboard and delete staff**\
✅ **Manage company information**, including **business entities, bank accounts, and exchange rates**

With these additional privileges, the **Admin Manager** also functions as a **Marco Platform administrator** for their company.

***

### **Manager Role Assignment**

Managers can be assigned to staff in one of the following **roles**:

* **Reporting Manager**
* **Data Manager**

When a manager is assigned to a staff member in either role, they can **view and manage** that staff member **based on their access privileges**.

Each staff member can have:

* **One** **Reporting Manager**
* **Multiple** **Data Managers**
* The **same manager** can be assigned as **both** a Reporting Manager and a Data Manager for the same staff member if needed.

<figure><img src="/files/JMZUcVGbFeczCfshzZ5S" alt=""><figcaption><p>Staff list in People</p></figcaption></figure>

***

#### **Reporting Manager**

A **Reporting Manager** is the staff member’s **direct manager**. In addition to their existing privileges, **Reporting Managers can approve the staff’s leave requests and expenses**.

***

#### **Data Manager**

A **Data Manager** is responsible for handling **staff data** for the company. Their permissions depend on their assigned **access privileges** (e.g., **leave management, payroll, salary administration**).

**Typical Data Managers** include **HR and payroll employees**, who manage **staff records** within **Marco**.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://help.marcopayroll.com/marco-user-guide-x4/2025/marco-platform-structure/customer-portal/manager-guide/access-and-roles.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
