Administration
Configure employees and portal access
Separate BU administrators from employee operations and protect employee records.
How to do it
- Open Administration → Users & roles to create BU users for Finance, People, POS and storefront configuration. Define custom roles and individual permission overrides in Role permissions.
- Open Administration → Employees, immediately below Users & roles. Add the company email, reporting manager, career level and employment details. A BU account using the same work email is associated automatically; create a BU user only when the employee needs workspace access.
- In Employees → Portal access create a named profile. Choose Self, Direct reports or All employees, then exclude specific employees or career levels where required. Exclusions govern record views, updates, document downloads and Data Handler exports.
- Grant the operational permissions required for People, Finance, SupaTill or Commerce orders and assign the profile. An employee-only account receives an email code; a linked BU account signs in with BU credentials and its optional passkey.
- Configure branding, policies, leave and timesheet rules through an authorized BU user. Employees can perform assigned operations without receiving configuration access. Store stock and catalogue administration also require BU users.
Check your result
An HR profile excluded from executive records cannot access those records by entering an ID or exporting a list.
Good to know
Job titles do not grant access. Personal self-service remains available; payroll runs require visibility of the complete workforce. SupaAdmin remains a separately approved owner portal.
Still need help?
Tell us your BU code and the step where you got stuck. Do not include passwords, BU PINs, tokens or recovery codes.
Contact SupaChrome support