Sensitive files
You may store leave documentation that should not be casual reading. Roles are how you describe the boundary.
Roles and access
Who can open a file is a product decision.
Operators, managers, and employees do not share a login. Sensitive fields sit behind roles you can explain to counsel — and to the person whose file it is.
Why it matters
Medical notes, government IDs, and compensation should not ride along with a birthday list. Least privilege is the default. Extra access is granted, not assumed.
Peer Roll ships with distinct roles: operators who run people ops, managers who approve work for their team, and employees who punch, request leave, and complete their own tasks. HR-only notes and certain documents stay with operators. Sensitive actions like pay changes, terminations and sign-in tokens are recorded with who and when. The longer security story — encryption, access, and backups — lives on the security page. This page is about the day-to-day question: who is allowed to see this?
Roles and access · Example Co.
Roles
Example Co.
HR admin
Sees pay. Employees see only their own rate.
Manager
Time, leave, and coverage. Not team pay.
Employee
Clock, Time off, and Me.
On the record
What you get in Peer Roll.
- Separate roles for operators, managers, and employees.
- Sensitive fields off the default manager view.
- HR-only notes and selected documents behind operator access.
- Sensitive actions like pay changes, terminations and sign-in tokens are recorded with who and when.
- Each person gets their own login.
How it runs
A week in this workflow.
01
Give people a role
An employee is not a manager. A manager is not an operator. The product starts from that split. The invite is how they get their own login — not a shared password.
02
Grant extras on purpose
If someone needs to see pay data or a restricted file, that is an explicit grant.
03
Record sensitive actions
Sensitive actions like pay changes, terminations and sign-in tokens are recorded with who and when.
Who uses it
Built for the jobs you already have.
Small teams wearing two hats
A founder may be operator and manager. That is two roles on one person — not one shared password for the office.
Related
These workflows share the same record.
HR-only notes
Private context that does not leak to the team view.
People ops sometimes needs a note that is not for the manager and not for the employee. Peer Roll keeps that space on the file — behind a role.
People directory
One employee record. Searchable. Owned.
Name, job, site, manager, documents, and status sit on a single file. The directory is how you find someone — not a Friday export from payroll.
Document library
Folders and uploads on the e-file — not a second drive.
The employee e-file is folders on the person: hire packet, I-9, policies, later uploads. Signed packets land there. That is the library. Not a company-wide document management suite.
Manager tools
Approvals, coverage, and birthday emails that stay private.
Managers get the queue they already run: time exceptions, leave requests, and who is out. Birthday dates stay on the file — not a company-wide calendar.
For encryption, access, and backups, see Security.
Want this workflow on your roster?
30-day free trial, no credit card needed. Then $4 per active person per month. The time clock is included.