Skip to main content
Empuls provides granular user access control through four predefined roles—Super Admin, General Admin, Manager, and User—and supports custom role creation with module-level and location-level permissions to meet complex organizational governance requirements.
Empuls gives HR and IT administrators precise control over who can access what within the platform. Rather than applying a flat permission model across all users, Xoxoday Empuls ships with four predefined roles, each carrying a distinct set of capabilities aligned to different organizational responsibilities.

​
Four Predefined Roles

Super Admins hold the highest level of authority—managing platform-wide configurations, integrations, budgets, and security settings. General Admins handle day-to-day administration such as launching recognition programs and reviewing engagement reports. Managers have visibility into their direct team’s activity and can nominate employees for awards. Users participate in recognition, redeem rewards, and engage with peers without exposure to any administrative controls.

​
Custom Roles for Complex Hierarchies

Beyond the defaults, Super Admins can define custom roles with scoped permissions. This is especially useful in large enterprises with layered reporting structures. A Regional HR Business Partner, for instance, might need read-only access to analytics for specific locations without the ability to edit program settings or budgets. Empuls supports role-based visibility at both the department and location level, so access remains contextually appropriate at every tier.

​
Temporary Access Delegation

Empuls allows Super Admins to delegate admin access on a temporary basis. When a primary administrator is on leave or unavailable during a high-activity period—such as a company-wide reward campaign—another team member can be elevated with time-bound permissions. This reduces operational bottlenecks without creating permanent security gaps or requiring IT intervention.

​
Real-World Example

Consider an organization using SAP SuccessFactors as its HRMS. When employee records sync into Empuls, role assignments map directly from job titles or cost centers defined in SAP SuccessFactors. A Finance Manager in SAP SuccessFactors automatically receives Manager-level access in Empuls, while HR Business Partners receive General Admin rights scoped to their respective business units. Notifications and approvals surface through integrated channels like Microsoft Teams or Slack, keeping the workflow intact without requiring users to switch tools.

​
Security and Compliance

This access model is built on a security foundation aligned with ISO 27001 and SOC 2 Type II standards. Restricting module access to only those who require it reduces the risk of unauthorized data exposure, supports internal audit requirements, and helps organizations meet data governance obligations. Every permission change is logged and auditable by Super Admins, providing a full trail for compliance reviews. Empuls treats role management as a core governance mechanism—not an afterthought—giving People teams the confidence to scale recognition programs across thousands of employees without sacrificing control or visibility. Learn more: Empuls Help Centre — Control

Setting Up SSO in Empuls

Configure Single Sign-On with your identity provider to streamline secure, password-free access for all Empuls users.

Audit Logs and Activity Tracking

Monitor admin actions, permission changes, and platform events with Empuls audit logs for full governance visibility.