RBAC GuideRBAC Matrix
PayMax RBAC Matrix
Complete breakdown of feature access by user role and subscription tier. Understand the tiered access model: Essential (Limited) → Advanced+ (Full) → Enterprise (Premium)
Tiered Access Model
- Essential (Limited): Access to core features with basic functionality
- Advanced+ (Full): Complete feature access with advanced capabilities
- Enterprise (Premium): Everything plus priority support & custom features
- Upgrade Path: Users see features but hit limitations, encouraging upgrades
Total Features
25+ Routes
User Roles
7 Distinct Levels
Access Tiers
3 Subscription Plans
Access Level Legend
All PlansFull access
EssentialLimited features
Advanced+Full access
EnterprisePremium
NoneBlocked
| Route/Feature | Company Admin | HR Manager | Payroll Admin | Employee | Contractor | Ext. Accountant | Read-Only |
|---|---|---|---|---|---|---|---|
| 🏠 CORE ACCESS | |||||||
| 🏠 Dashboard (/dashboard) | All Plans | All Plans | All Plans | All Plans | All Plans | All Plans | All Plans |
| 👤 My Profile (/dashboard/my-profile) | All Plans | All Plans | All Plans | All Plans | All Plans | All Plans | All Plans |
| 👤 EMPLOYEE SELF-SERVICE | |||||||
| 🏠 Employee Dashboard (/employee) | None | None | None | All Plans | All Plans | None | None |
| 🏖️ Employee Leave (/employee/leave) | None | None | None | All Plans | All Plans | None | None |
| 📄 Employee Payslips (/employee/payslips) | None | None | None | All Plans | All Plans | None | None |
| 👤 My Payslips (/dashboard/payroll/my-payslips) | All Plans | All Plans | All Plans | All Plans | All Plans | None | None |
| 👔 HR MANAGEMENT | |||||||
| 🧠 Workforce Analytics (/dashboard/employees) | Advanced+ | Advanced+ | None | None | None | None | Advanced+ |
| 📝 Change Requests (/dashboard/employees/change-requests) | Essential (Basic) | Essential (Basic) | None | None | None | None | Essential (Basic) |
| 🏖️ Leave (/dashboard/leave) | All Plans | All Plans | None | All Plans | All Plans | None | All Plans |
| ⚙️ Leave Admin (/dashboard/leave/admin) | Essential (Basic) | Essential (Basic) | None | None | None | None | Essential (Basic) |
| 📚 Leave Policies (/dashboard/leave/policy) | Essential (Basic) | Essential (Basic) | None | None | None | None | Essential (Basic) |
| ⭐ PERFORMANCE MANAGEMENT | |||||||
| ⭐ Performance Reviews (/dashboard/performance-reviews) | Advanced+ | Advanced+ | None | Advanced+ | None | None | Advanced+ |
| 📊 All Reviews (/dashboard/performance-reviews/all-reviews) | Advanced+ | Advanced+ | None | None | None | None | Advanced+ |
| 👤 My Reviews (/dashboard/performance-reviews/my-reviews) | Advanced+ | Advanced+ | Advanced+ | Advanced+ | None | None | Advanced+ |
| 💰 PAYROLL PROCESSING | |||||||
| 💰 Payroll (/dashboard/payroll) | All Plans | None | All Plans | All Plans | All Plans | All Plans | All Plans |
| ⚙️ Payroll Processing (/dashboard/payroll/processing) | All Plans | None | All Plans | None | None | None | None |
| 🧮 Tax Engine (/dashboard/payroll/tax-engine) | Advanced+ | None | Advanced+ | None | None | Advanced+ | Advanced+ |
| ⚖️ Compensation Policies (/dashboard/payroll/policies) | Essential (Basic) | Essential (Basic) | Essential (Basic) | None | None | Essential (Basic) | Essential (Basic) |
| 📊 FINANCIAL INTEGRATIONS | |||||||
| 📊 Accounting Integrations (/dashboard/xero) | All Plans | None | All Plans | None | None | All Plans | All Plans |
| 📊 Integration Payments (/dashboard/xero/payments) | All Plans | None | All Plans | None | None | All Plans | All Plans |
| 🏢 COMPANY ADMINISTRATION | |||||||
| 💳 Seat Management (/dashboard/billing/seats) | All Plans | None | None | None | None | None | None |
| 💳 Payment Setup (/dashboard/payment-setup) | All Plans | None | None | None | None | None | None |
| 🏢 Company Settings (/dashboard/settings/company) | All Plans | None | None | None | None | None | None |
| ⚙️ SHARED SETTINGS | |||||||
| 🎨 Payslip Design (/dashboard/settings/template) | Essential (Basic) | Essential (Basic) | Essential (Basic) | None | None | None | Essential (Basic) |
| 🏗️ Organization (/dashboard/settings/organization) | Advanced+ | Advanced+ | None | Advanced+ | Advanced+ | None | Advanced+ |
Essential Plan Feature Limitations
📝 Change Requests
Basic profile updates only (no bulk changes, advanced workflows)
🏖️ Leave Admin
Standard leave types only (no custom policies, advanced analytics)
📚 Leave Policies
Basic statutory policies configuration (no complex rules, conditional logic)
⚖️ Compensation Policies
Basic salary structures configuration (no complex formulas, bonus calculations)
🎨 Payslip Design
3 basic templates only (no custom branding, advanced layouts, or logo uploads)
Related RBAC Guides
Ready to Configure RBAC?
Use this matrix to plan your team's access levels and ensure proper security controls for your PayMax system.