Permissions: Owners

Product tier: Available for Greenhouse Welcome and Greenhouse Onboarding subscription tiers

By default, Greenhouse Onboarding provides your organization with three essential roles to help manage your onboarding process:

Note: Users are granted Manager access when they are assigned as a manager for another employee or new hire.

While these roles typically cover a wide range of administrative needs, your organization may need to create unique roles to help manage certain tasks throughout your onboarding process.

With the Custom Access tier, users with Owner access can create custom roles with very specific administrative and employee field permissions. For example, you can configure employees with custom access to onboard pending hires or manage new hire documents and tasks based on specific criteria.

Custom roles your organization might consider creating include Hiring Manager, HR Specialist, Accounting Team, and IT Manager.

Create a custom role

Navigate to Settings, then select Data Flow Permissions to create a custom role.

Greenhouse Onboarding permissions page with the settings tab highlighted on the navigation bar and permissions tab highlighted in the left panel

Scroll to the Custom Access panel and click Create New.

Custom access panel on the Greenhouse Onboarding permissions page with create new button highlighted

Add a name for your new custom role. When you're finished, click Save and Close.

Screenshot of custom access role name save button

Your new custom role will now appear under Custom Access on the Permissions page.

Add users to a custom role and define match criteria

Once you've created a new custom role, it will automatically open and allow you to configure settings. You can also click to select and edit custom roles at any time from the Permissions page.

On the custom role's page, navigate to the Users tab and click Add User.

Custom role user permissions page with add user button highlighted

Use the Add user(s) field to select the employees in your organization who should be assigned to this custom role.

Custom role user permissions window with add users field filled out and highlighted

Next, define matches for users with this custom role. You can use the following fields to give custom access users permission to manage onboarding, documents, and tasks for new hires that match your selected criteria:

  • Department matches – give custom users access to employees from specific departments in your organization
  • Location matches – give custom users access to employees from specific locations
  • Employment Status matches – give custom users access to employees with specific employment statuses
  • Other Criteria matches – give custom users access to employees tagged with other criteria

Note: Add employees to the Except for these employees field if you'd like to exclude them from having their fields, documents, and tasks managed by custom access users. Even if they match the criteria you've set above, these employees will not be viewable or editable by custom access users.

Custom role user permissions window with match criteria fields highlighted and filled out

Click Save and Close when you're finished.

Update the name of a custom role

Navigate to the Settings tab for your custom role.

Click the pencil icon to update your custom role's Name at any time. Click Save when you're finished.

IT Support example custom access role with pencil icon for updating administrative permissions highlighted

Manage a custom role's administrative permissions

Each custom role has a unique set of permissions that allow assigned users to complete actions in Greenhouse Onboarding. These options are separated into administrative permissions and field permissions on the custom role's Settings page.

Administrative permissions are broad permissions related to onboarding pending hires, assigning tasks or documents, and managing the employee profile for future and current employees.

IT Support example custom access role with assigned permissions highlighted in role settings tab

By default, custom roles aren't assigned any administrative permissions. You can assign administrative permissions to a role by marking any of the following checkboxes:

  • Can manage and report on E-Signature documents – this custom role will have access to view the E-Signature report and manage E-Signature requests and documents for employees matching the criteria defined in the Users tab
  • Can configure tasks for future employees – this custom role will have access to create tasks for future employees matching the criteria defined in the Users tab
  • Can manage and report on assigned tasks – this custom role will have access to manage tasks in the task report for current employees matching the criteria defined in the Users tab
  • Can manage field reports – this custom role will have access to create and manage field reports with fields from employees who match the criteria defined in the Users tab
  • Can manage pending hires – this custom role will have access to manage and onboard pending hires who match the criteria defined in the Users tab
  • Can access the new hire report – this custom role will have access to view new hires who match the criteria defined in the Users tab
  • Can access the email activity tab on the employee profile – this custom role will have access to view the email activity tab in employee profiles
  • Can access the integrations tab on the employee profile – this custom role will have access to view the integrations tab in employee profiles

Manage a custom role's field permissions

Field permissions are specific sets of privileges that allow a user to view or update the fields on an employee's profile. This functionality is more specific and configurable than administrative permissions, giving you the ability to provide access (or hide access) to custom users for each employee profile field.

Example: An IT Support Specialist may need a custom role to access and edit a Computer Model field to keep track of equipment assigned to different employees.

By assigning permission to this specific field, your organization can ensure that this support specialist can update the correct profiles without getting full access to the Greenhouse Onboarding system and all employee profiles.

To grant a custom role additional access to employee fields, click the Settings tab from the custom role's page and navigate to the Field Permissions panel.

Field permissions section in custom access role settings tab

You can configure your custom role's access to each employee profile field by marking the Can Edit for Employees or Can View for Employees checkboxes. By using different combinations of the checkboxes, you can define unique permission sets for each field.

View Only

The Can View for Employees checkbox allows your custom role to view the contents of a field on an employee profile. If the Can Edit for Employees checkbox is left unmarked, the custom user will have view-only permissions and won't be able to edit this employee field.View only role example

View and Edit

Selecting both checkboxes gives custom users access to view and edit this employee field.

Note: Giving access to edit an employee field automatically grants permission to view the field.

Full access custom role example

Hidden

If neither checkbox is selected, the employee field will be hidden for this custom role. You can use this configuration to hide sensitive or private information that should only be viewed by managers or administrators.

Hidden field custom role example

Note: Your custom role's access to view and edit employee fields will be set to Default Employee Access until you grant additional access.

Additional resources

Learn more about custom permissions in Greenhouse Onboarding: