What a non-admin manager can change

You don't have to be an administrator to look after the team. Give an office manager Manage employees within the company and they can add people, change their details and pay — and, if they also have Can change employees' permissions, set their permissions — within limits.

What they can do

• Open Users from the menu under their name (or Settings › Users & permissions › Users) and see everyone in the branch they're working in.
• Add people with New user.
• Change anyone's Details, Integration, Notifications, Auto Assignment, Signature and Payroll, and read their Logs.
• Set other people's positions and Active switch.
• Set other people's Permissions, user type and department, and departments' Group Settings — only with Can change employees' permissions as well. See Let a manager add people without changing permissions.
• Add, rename and delete departments.
• See the Connections list and connect accounts for people.

Setting other people's passwords and sending password links needs Can update login password as well.

The five limits

1. They can't make anyone an administrator. The Admin user type isn't offered to them. Only an administrator can make somebody an administrator.
2. They can't change their own access. Their own user type, department, positions, branches, Active switch and permissions are set by an administrator. You cannot change your own access. Ask an administrator.
3. They can't touch an administrator. Not their access and not their password. Only an administrator can change an administrator's access. / Only an administrator can change an administrator's password.
4. They can only hand out what they hold. They can switch a permission on or off for someone else only if they hold it themselves. You can only grant or remove permissions you hold yourself (not …). The same goes for branches: You can only move people among the branches you work in.
5. They work only with people in their own branches. A manager sees and changes someone only if that person works in at least one of the branches the manager works in — details, access, permissions, pay, Signature card, notifications, password and password links alike. A San Diego manager can't open or change somebody who works only in Austin. That person does not work in any of your branches. Pay and permissions are kept per branch, and they change only those of the branch they're working in.

These rules are checked when they press Save, so nothing changes if one is broken.

Everyone's own record

Anyone — manager or not — can open their own record from My profile and change their details, their password, their mailbox and their Signature card. Nobody can switch themselves off (You cannot deactivate yourself.), and an administrator can't take away their own administrator role.

Good practice

• Give the manager the permissions their team needs — a manager can only pass on what they have.
• Keep at least two administrators, so one can always fix the other's access.