Blog  /  Payroll

Delegating HR work without handing over the keys

PayrollOctober 3, 2026·2 min read·by the Teamdott team

The moment a company passes ten people, one person stops being able to do all of HR. But most small-business tools know only two roles — admin and everyone else — so the assistant who should only fix clock-in mistakes can suddenly see every salary in the company.

Nine permissions, not two roles

Teamdott's HR console separates the work into nine grants: attendance viewing, attendance corrections, leave approvals, payroll viewing, payroll running, the payslip designer, employees & rules, company branding, and announcements. A Head of HR holds everything and decides who gets what.

app.teamdott.com
HR team & access: one row per person, one checkbox per permission, with presets for the common jobs.
HR team & access: one row per person, one checkbox per permission, with presets for the common jobs.

Three presets cover most teams

Guardrails that matter

People without HR access are refused at the HR login door entirely. Tabs someone cannot use never appear for them, and every action is checked again at the moment of the click. There is always at least one Head of HR — the system refuses to remove the last one. And every grant records who gave it, so access reviews take minutes.

Why this beats "just trust everyone": it is not about suspicion. Clear permissions protect the assistant too — nobody can blame them for a payroll change they could not have made.

Run your team on Teamdott

Clock in/out, live availability, timesheets, leave, payroll and branded payslips — plus one thread per client. The workspace preview is open: no card, no setup call.