View own record employees.view_own View direct reports employees.view_team View all employees employees.view_all Create employee records employees.create Update employee records employees.update Archive employee records employees.delete View statutory and salary data employees.view_sensitive Confirm, transfer and exit staff employees.manage_lifecycle Create system accounts for staff employees.provision_access

View structure, positions and grades organisation.view Manage structure, positions and grades organisation.manage

View vacancies and applications recruitment.view Create and publish vacancies recruitment.manage_vacancies Screen and shortlist applicants recruitment.screen Schedule and score interviews recruitment.schedule_interviews Raise and send offers recruitment.manage_offers Convert candidates to employees recruitment.hire

View onboarding programmes onboarding.view Manage templates and programmes onboarding.manage Complete assigned onboarding tasks onboarding.complete_tasks

Apply for leave leave.apply View team leave leave.view_team View all leave leave.view_all Configure leave types and holidays leave.manage_types Adjust balances and run carry forward leave.manage_balances Cancel any leave application leave.cancel_any

View own attendance attendance.view_own View team attendance attendance.view_team View all attendance attendance.view_all Manage biometric devices and schedules attendance.manage_devices Import attendance data attendance.import Adjust attendance records attendance.adjust

View payroll periods and inputs payroll.view Manage pay components and salaries payroll.manage_components Build and verify payroll inputs payroll.build Lock periods and export to payroll payroll.export Approve payroll and post it to the ledger payroll.approve Record staff loans and advances payroll.loans

View own appraisals performance.view_own Appraise direct reports performance.view_team View all appraisals performance.view_all Manage cycles and competencies performance.manage_cycles Moderate appraisal scores performance.moderate

View own training record training.view_own Raise training needs training.raise_needs View all training records training.view_all Manage courses, sessions and enrolment training.manage

View documents documents.view Upload documents and versions documents.upload View confidential documents documents.view_confidential View restricted documents documents.view_restricted Request electronic signatures documents.request_signature Archive and delete documents documents.delete

View workflow definitions workflows.view Configure approval workflows workflows.manage Action approvals on behalf of others workflows.act_on_behalf Act as the HR office approver workflows.approve_as_hr

View standard reports and dashboards reports.view Export report data reports.export Build ad-hoc reports reports.build

View projects, workplans and results projects.view Create and configure projects and results framework projects.manage Manage project activities and workplans projects.activities Submit activity concept notes projects.concept_submit Approve activity concept notes projects.concept_approve Request activity imprest funds projects.imprest_request Approve and disburse imprest funds projects.imprest_approve Surrender imprest and submit receipts projects.imprest_surrender Register beneficiaries and track participation projects.beneficiaries Record indicator progress and M&E results projects.mne Upload and verify activity evidence projects.evidence Generate and review donor reports projects.donor_reports Perform grant and project closure projects.close Confirm activity budgets (Finance) projects.budget_confirm Approve project workplans projects.workplan_approve Verify uploaded activity evidence projects.evidence_verify Verify imprest surrenders and receipts projects.imprest_verify

View church structures and CCT initiatives cct.view Manage regions, congregations and pastors cct.manage Track CCT CCMP process and transformation projects cct.initiatives Document and publish community transformation stories cct.stories Submit congregation quarterly reports cct.reports Review congregation reports and move CCT stages cct.review

View accounts, journals and balances finance.view Manage chart of accounts finance.manage_coa Draft journal entries and vouchers finance.journals_create Approve and post journal entries (Maker-Checker) finance.journals_post Manage budgets, allocations and revisions finance.budgets_manage Import statements and perform bank reconciliation finance.banking_reconcile Generate financial statements (Balance Sheet, P&L, Cashflow) finance.statements Manage accounts payable and receivable finance.payables_receivables Approve supplier bills for payment finance.bills_approve Request payments (bills, imprests) finance.payments_request Release and confirm payments finance.payments_approve Reverse posted journals finance.journals_reverse Maintain exchange rates finance.exchange_rates Request budget reallocations finance.budget_revise Approve budget reallocations finance.budget_approve

View procurement plans and requisitions procurement.view Create and manage procurement plans procurement.plan Raise and approve purchase requisitions procurement.requisitions Issue RFQs and manage quotation submissions procurement.rfq Evaluate bids and record committee scores procurement.evaluate Issue and approve purchase orders (PO) procurement.orders Inspect goods and create GRNs procurement.receipts Manage supplier register and pre-qualification procurement.suppliers Approve purchase requisitions procurement.requisitions_approve Award bids and issue purchase orders procurement.award Capture and match supplier invoices procurement.invoices Verify supplier documents and suspend suppliers procurement.suppliers_verify Create and manage supplier contracts procurement.contracts Activate and terminate contracts procurement.contracts_activate

View company asset register assets.view Register and assign physical and digital assets assets.manage Calculate and run depreciation schedules assets.depreciate Track servicing and warranty/insurance renewals assets.maintenance Process asset write-off and disposal assets.dispose

View risk registers and heatmaps risks.view Log risks, mitigation actions and issues risks.manage

Access knowledge repository and research knowledge.view Publish lessons learned, evaluations and case studies knowledge.publish

View payment gateways and integrations integrations.view Initiate mobile money (M-Pesa/Tende) and banking payments integrations.manage Access AI MIS Assistant and intelligence tools integrations.ai

View donors, agreements, schedules and funding position donors.view Record agreements, schedules and deliverables donors.manage Record donor receipts donors.receipts

View business enterprises, their income, costs and performance enterprises.view Register enterprises, set targets and record income, expenses and remittances enterprises.manage Verify recorded enterprise transactions enterprises.verify

Upload and validate migration files migration.run Commit validated migration batches migration.commit

Approve any employee timesheet timesheets.approve_all View hours logged against projects timesheets.project_hours

View the communication log communication.view Send SMS, email and media posts communication.send

Run and verify backups security.backups Maintain authorisation limits security.limits Create and revoke API tokens security.api Manage HR alerts alerts.manage Manage users and roles users.manage Manage system settings settings.manage View audit trail and activity logs audit.view