Team & roles
Access for DA KINGS Financial Services. You are previewing StaffPay as: Company Owner.
Team members
A user may belong to more than one company
| Name | Role | Status | Two-factor | Actions | |
|---|---|---|---|---|---|
| Thapelo Kgabage | thapelo@dakings.example.co.za | Company Owner | Active | Enabled | |
| Nomsa Dlamini | nomsa@dakings.example.co.za | Payroll Administrator | Active | Optional | |
| Chantelle Naidoo | chantelle@dakings.example.co.za | Payroll Reviewer/Approver | Active | Optional | |
| Lerato Mahlangu | lerato@tellulahwater.example.co.za | HR Administrator | Active | Optional | |
| Sibusiso Mthembu | sibusiso@dakings.example.co.za | Payroll Bureau Administrator | Active | Optional | |
| Andre Fourie | auditor@external.example.co.za | Read-only Auditor | Pending | Optional | |
| Wandile Ngcobo | wandile@dakings.example.co.za | Employee Self-Service | Active | Optional |
Role permissions
Least privilege with maker-checker separation
| Role | Access | Restriction |
|---|---|---|
| Platform Super Administrator | Platform, subscriptions, system health | No unaudited payroll access |
| Company Owner | Everything in the company, including approval | Full |
| Payroll Administrator | Capture inputs, calculate, prepare declarations | Cannot approve own run |
| Payroll Reviewer/Approver | Review, approve, sign off statutory exports | Cannot capture inputs |
| HR Administrator | Employees, leave, documents | No banking or PAYE edits |
| Employee Self-Service | Own payslips, leave and documents | Own record only |
| Read-only Auditor | Read-only across payroll and audit log | No changes, masked identifiers |
| Payroll Bureau Administrator | Assigned client companies | Scoped to assigned clients |
Capability matrix
The authority actually enforced in every module — capture is separated from approval
| Role | Add / edit companies | Add / edit employees | Capture payroll inputs | Approve & release payroll | Capture leave | Approve / decline leave | Manage document vault | Download reports | Manage statutory filing | Platform administration |
|---|---|---|---|---|---|---|---|---|---|---|
| Platform Super Administrator | ||||||||||
| Payroll Bureau Administrator | ||||||||||
| Company Owner | ||||||||||
| Payroll Administrator | ||||||||||
| Payroll Reviewer/Approver | ||||||||||
| HR Administrator | ||||||||||
| Employee Self-Service | ||||||||||
| Read-only Auditor |
Roles are stored separately from user profiles to prevent privilege escalation. Role changes, elevations and sensitive data reveals are written to the immutable audit log.