Access Rights and Permissions

Group ID	Name	Description
SWS-ALL	SwissSalary – All Users	The only user role that must be assigned to every SwissSalary user. The “Wage Accounting Process” feature requires that the system should obtain “indirect” information about all clients (license check, how many employees are currently accounted for in the entire database. Of course, the payroll staff member cannot see any data of the restricted clients).
SWS-CONS / SWS INVOICING (SwissSalary BAU only)	SwissSalary - Consortium SwissSalary - Invoicing	This role is used for working in the ARGE module. This permission role allows full access to ARGE items and ARGE posting journals. This role is suitable for employees that are only allowed to operate ARGE in payroll accounting.
SWS-EE-EDIT	SwissSalary – Edit Employees	This role is the classical assignment for payroll staff members that need to use all features of payroll accounting. The user can edit, delete, enter data in SwissSalary; however s/he cannot change payroll master data.
SWS-EE READ	SwissSalary – Read Employees	Similar to the SWS-EE EDIT role, with the exception that data can be viewed only, and not changed (read-only rights).
SWS-HR EDIT	SwissSalary – HR Edit Employee	PIS (Personal Information System) add-on module. A user with this role can modify, delete and enter data in PIS.
SWS-HR READ	SwissSalary – HR Read Employee	PIS (Personal Information System) add-on module. Read-only rights.
SWS-HR SETUP	SwissSalary – HR Setup	PIS (Personal Information System) add-on module. A user with this role can change settings in PIS. Classical HR wage administrator.
SWS-POST (SwissSalary NAV only)	SwissSalary – Posting	In accordance with the SOX guidelines, payroll staff member is not allowed to 'post wages'. This user role can be assigned to an employee in the FIBU that is exclusively responsible for wage posting. IMPORTANT: Of course, this employee must be also activated in SwissSalary under Company -> Settings -> Users or in the RTC version under SwissSalary Administration -> Users.
SWS-SETUP	SwissSalary – Setup	Classical authorization role for wage administrator
SWS-SETUP-LIGHT	SwissSalary - Setup Light	Same authorization as SWS-SETUP with the restriction that no changes can be made to the SwissSalary User
SWS-ST EDIT	SwissSalary – Edit Salary Type	Full access for editing wage types. A user with this role can create, modify and delete wage types.
SWS-BUDGET-EDIT	SwissSalary Budget - Edit	This role is used to create budget structures, FTE budgets, budgets in amounts and forecasts.
SWS-BUDGET-READ	SwissSalary Budget - Read	This role is used to read budget structures, FTE budgets, budgets in amounts and forecasts.
SWS-BUDGET-SETUP	SwissSalary Budget - Setup	This role is used for setup in the SwissSalary Budget module. Classical authorization role for wage administrators
SWS-KLE EDIT	SwissSalary KLE – Edit	KLE cases can be edited with this role. If this role is assigned, the SWS-EE-EDIT role or SWS-EE-READ role must also be assigned.

After each Update/PreUpdate the modified permission roles must be adjusted in SwissSalary (new tables access, etc.)

❑If you made individual adjustments in the Default “SWS-*” permission roles, please bear in mind that they are overwritten with the automatic import of the “default” roles.

❑Be sure to add these new tables to the relevant permission roles before releasing the system for the users!

The import process for default roles is started via Role Center-> Organization. Here you can “Install all Store updates” with a single click:

In case of customer-specific roles, select relevant path for the ZIP file in the Options tab and choose Import under Direction. Then click OK, default user roles are adjusted in SwissSalary.

If you made changes to our default user roles or want to manually maintain user roles, you can do so below or under Extras -> Security -> Roles. Click the relevant role and add the new tables under Role -> Access rights. This setting can be found in the RTC client under Departments -> Administration -> IT administration -> General -> Sets of rights. If you have any questions about these settings, contact the partner responsible for you.

The tables below have been rebuilt and must be added to the relevant roles (if already used and for companies that do not work with default permissions):