---
title: "Restricting Permissions for Viewing Payroll Data"
slug: "restricting-permissions-for-viewing-payroll-data"
tags: ["Language - English", "Area - Payroll", "Area - User Settings", "Area - Administration", "Industry - Landscaping", "Type - Task (How-To)", "Role - System Admin", "Role - Accountant (AR)", "Skill Level - 2 (Intermediate)"]
updated: 2026-01-09T15:24:38Z
published: 2026-01-09T15:24:38Z
canonical: "guide.youraspire.com/restricting-permissions-for-viewing-payroll-data"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://guide.youraspire.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Restricting Permissions for Viewing Payroll Data

## **Purpose**

When your company onboards onto Aspire, it may setup several users with the System Admin role. Being a System Admin has a lot of permissions, including the ability to view employees' payroll information on the contact record. If your company does not want certain power users to view this information, a great option will be using the Enhanced Branch Admin Security permission! Roles that Show Payroll Information

- System Admin – Will default to show payroll tab on employee contact

## **What Does Enhanced Branch Admin Do?**

With the Enhanced Branch Admin permission checked, users assigned to the Branch Admin Role will be able to do some additional things within the system, *specifically in Administration*. This also depends on the branches they are assigned on their user record (which we will discuss later). Below is a table that summarizes differences and similarities. To learn more details, read this [article](https://guide.youraspire.com/docs/administration-visibility-in-aspire-for-branch-administrators).

| **Function*** | **Branch Admin** | **Enhanced Branch Admin** |
| --- | --- | --- |
| Manage Users | No | Yes |
| Manage Devices | Yes | Yes |
| Manage Services | No | Yes |
| Manage Items | No | Yes |
| Manage Workflows | No | Yes |
| Manage Pricing | No | Yes |
| Manage Branches | No | Yes |
| ⚠️ View Payroll Information | No | No |
| ⚠️ Create and Manage Lists | No | No |

**applies only to branches that are assigned to the user's record.*

## **Checking the Enhanced Branch Admin Permission**

If you have decided to use the Enhanced Branch Admin permission for your Branch Admin role, let's start by checking the permission.

1. Navigate to the *Administration* module by clicking your User Profile in the bottom left corner and then *Administration* (⚙️)

2. Select *Configuration* in the upper right corner and then the *Application* subsection.

![](https://cdn.document360.io/5942a8d7-f3b1-4919-bdfa-d477d8498fe3/Images/Documentation/restricting-permissions-for-viewing-payroll-data-image-2wx0hrzp.png?sv=2026-02-06&spr=https&st=2026-11-13T10%3A06%3A27Z&se=2026-11-13T11%3A06%3A27Z&sr=c&sp=r&sig=KJyT6gWRSrHDZeWqTr6uU6F9%2BD0QpdP6nFPlq1uE244%3D)

Then

![](https://cdn.document360.io/5942a8d7-f3b1-4919-bdfa-d477d8498fe3/Images/Documentation/restricting-permissions-for-viewing-payroll-data-image-p6u2oo0r.png?sv=2026-02-06&spr=https&st=2026-11-13T10%3A06%3A27Z&se=2026-11-13T11%3A06%3A27Z&sr=c&sp=r&sig=KJyT6gWRSrHDZeWqTr6uU6F9%2BD0QpdP6nFPlq1uE244%3D)

3. Check the Enhance Branch Security Permission. This will give anyone with the Branch Administrator role increased permission for the branches they are assigned to..

![](https://cdn.document360.io/5942a8d7-f3b1-4919-bdfa-d477d8498fe3/Images/Documentation/restricting-permissions-for-viewing-payroll-data-image-jl6mus20.png?sv=2026-02-06&spr=https&st=2026-11-13T10%3A06%3A27Z&se=2026-11-13T11%3A06%3A27Z&sr=c&sp=r&sig=KJyT6gWRSrHDZeWqTr6uU6F9%2BD0QpdP6nFPlq1uE244%3D)

4. Click *Save* in the upper right.

## 

## **Permissions Needing to be Unchecked on Branch Admin Role**

1. Go to Administration ➡️ User Management ➡️ User Roles

2. Select the Branch Admin role and *uncheck* the following permissions:

- In *Time Reporting*: View Read Only Payroll Data – If left *checked*, will show Payroll section on contact record.
- *In Time Reporting:* HR Admin – This is defaulted to be unchecked for Branch Admins, however, verify this permission is left *unchecked*.
- In *Reports*: View Pivot Table Reports - Hours – If left *checked*, will show Payroll section on contact record. (if *View Pivot Table Reports* and *View Revenue* are also checked)
- In *Reports*: View Audit Report- If this permission is left checked, it will show Audit reports, which displays a Pay Rate report.
- In *Reports*: View End Of Month Report – If left *checked*, will show *Payroll* section on contact record. (If *View Revenue* is also checked)

💡 TIP: To find the below permissions faster, use CTRL + F on your keyboard and type the permission below to find all matching results

## **Assigning the User Role and Adding Branches in the User Record**

Since Enhanced Branch Admin abilities only apply to branches the Branch Admin is assigned to in their user record, it will be important to give users all needed branches.

1. Go to the *Contacts* module.
2. Search for the user's contact.
3. Once found, click on the user's contact.  
  
[![](https://cdn.document360.io/5942a8d7-f3b1-4919-bdfa-d477d8498fe3/Images/Documentation/restricting-permissions-for-viewing-payroll-data-image-jn8ucrzk.png?sv=2026-02-06&spr=https&st=2026-11-13T10%3A06%3A27Z&se=2026-11-13T11%3A06%3A27Z&sr=c&sp=r&sig=KJyT6gWRSrHDZeWqTr6uU6F9%2BD0QpdP6nFPlq1uE244%3D)](https://downloads.intercomcdn.com/i/o/572447686/8de773d313734c735f2d3a66/image.png?expires=1757975400&signature=a7334c55ad45f3f2ef047742927d200ee65594a0a4a07fe03376a5234605e7dc&req=cSclEs15m4lZFb4f3HP0gDSLGv5Ui5dtfJ58zUNk%2FpNO2BP6%2Fu9m7Pnut1LU%0A8CI%3D%0A)
4. Click the triple dot menu and select *Update User*. If the employee has not had a user profile created, it will say *Create User.* [![](https://cdn.document360.io/5942a8d7-f3b1-4919-bdfa-d477d8498fe3/Images/Documentation/restricting-permissions-for-viewing-payroll-data-image-jpfi1uqz.png?sv=2026-02-06&spr=https&st=2026-11-13T10%3A06%3A27Z&se=2026-11-13T11%3A06%3A27Z&sr=c&sp=r&sig=KJyT6gWRSrHDZeWqTr6uU6F9%2BD0QpdP6nFPlq1uE244%3D)](https://downloads.intercomcdn.com/i/o/572450432/457586fc094e422ea7c32da4/image.png?expires=1757975400&signature=1cbe222401d0e321e0fc4d0c4dd3081c92dec521284d1f501f837667b33a31c1&req=cSclEsx%2BmYJdFb4f3HP0gI%2FVkPP5hLUMu54s8LGiq4P6K%2Fj4kLrGOmf9PGIo%0AHb0%3D%0A)
5. If you would like the user to have the upgraded permissions for all branches, keep the *All Branch Access* checked. As well, assign the user the role of *Branch Admin*.  
[![](https://cdn.document360.io/5942a8d7-f3b1-4919-bdfa-d477d8498fe3/Images/Documentation/restricting-permissions-for-viewing-payroll-data-image-pj3anxxd.png?sv=2026-02-06&spr=https&st=2026-11-13T10%3A06%3A27Z&se=2026-11-13T11%3A06%3A27Z&sr=c&sp=r&sig=KJyT6gWRSrHDZeWqTr6uU6F9%2BD0QpdP6nFPlq1uE244%3D)](https://downloads.intercomcdn.com/i/o/572452770/a3d1ccf790ca7c0ba6955835/image.png?expires=1757975400&signature=f5b720333bed4f14aa281ee60f48aee4983278c1ad6327fa1b13b7fe21292bb3&req=cSclEsx8moZfFb4f3HP0gE%2FrcanF%2F8nJce%2B48BU5Ze7URvU4CLpyBbQb0kYM%0ApVs%3D%0A)
6. Click *Save* in the top right.