How-to

Restrict administrator access by location

Last updated July 27, 2026 · Tushar Agarwal

On this page

Purpose

This article explains how to assign admin permissions to employees based on specific locations within HRStop.
This feature helps multi-location organizations delegate control, so that each administrator can manage only the employees, data, and modules associated with their assigned location(s).


When you may need this

  • When your organization operates across multiple offices or regions.
  • When you want administrators or HR managers at each location to manage only their local employees.
  • When you want to maintain data security by limiting visibility to location-level admins.

Prerequisites

Before assigning admin permissions at the location level, make sure of the following:

  1. Your organization must have at least two locations created in HRStop.
    To add locations, navigate to Control Panel → Settings → Modules → Location, and create multiple locations from there.
    For detailed steps, refer to How to Add Locations in HRStop.
  2. The Enterprise Feature “Enable User Permissions Based on Locations and Entities” must be turned ON.
    This is a value add-on feature available only to organizations subscribed to Enterprise Services.
    You can enable it from Control Panel → Settings → Enterprise Features.

Once these settings are configured, you can assign location-specific admin permissions.


Step by step: how to assign admin permissions at the location level

Note: Only administrators with access to the Settings and Security modules can assign admin permissions at the location level.

  1. Log in as an Administrator who has permission to manage the Settings module.
  2. Navigate to: Control Panel → Settings → Security.
  3. Scroll down to the Admin Permissions section.
  4. On the right side, locate the section to assign permissions.
  5. Select the employee who should have admin access from the dropdown list.
  6. Choose the admin permissions from the multi-select dropdown based on the level of control required.
  7. Map the employee to one or more locations using the location selector.
  8. Click Submit to save the changes.
  9. The employee must log out and log in again to view the updated permissions for the assigned locations.

Example

Suppose your organization has two locations — Location A and Location B:

  • Administrator A is assigned to Location A and can manage only employees mapped to that location.
  • Administrator B is assigned to Location B and can manage only employees from that location.
  • Administrator C, who has access to all locations, can manage employees from both A and B.

This setup ensures each admin handles only their own branch or region while maintaining overall data control and security.


Other admin permission options

If your organization uses Enterprise Features, you can also assign admin permissions at the Entity or Business Unit level.
For details, refer to the Related Articles section below.


Pro tips

  • Make sure that each employee’s profile is correctly mapped to the appropriate location before assigning admin permissions.
  • Review location-level permissions periodically to ensure they align with organizational changes.
  • Use Enterprise Features only when your subscription includes multi-location or multi-entity access.

Frequently asked questions

What happens when Administrator Access is restricted by Location?

When Administrator Access is restricted by Location, the administrator can perform the assigned administrative functions only for employees belonging to the selected Locations. Employees from other Locations will not be visible or manageable through those permissions.

Can an administrator be assigned to multiple Locations?

Yes. An administrator can be assigned one or more Locations. They will be able to perform the permitted administrative functions for employees belonging to all the assigned Locations.

If an administrator has access to all modules but only one Location, what can they manage?

The administrator can access all the modules assigned to them, but only for employees belonging to the selected Location. They will not be able to view or manage employees from other Locations.

Can different administrators manage different Locations?

Yes. Organizations can assign different administrators to different Locations, allowing each administrator to manage only the employees within their assigned Locations while maintaining centralized control.

Can Location-based restrictions be combined with module-level permissions?

Yes. Location restrictions work together with module permissions. For example, an administrator may be given access to Employee, Leave, and Attendance modules for Locations A and B only. They will be able to manage those modules for employees in Locations A and B, but not for employees in other Locations or for modules they have not been granted access to.