Restrict administrator access by business unit

Purpose

This article explains how to assign admin permissions to employees based on Business Units within HRStop.
A Business Unit represents a logical division or vertical within a single legal entity — typically used when an organization manages multiple product lines or service verticals under one company.

Assigning admin permissions by business unit allows organizations to delegate administrative control specific to each vertical, ensuring secure and structured access across different product or service lines.

---

When you may need this

• When your organization operates with multiple business verticals under a single legal entity.
• When each product or service line requires its own administrator to manage employees and data independently.
• When you want to restrict administrative control to the relevant vertical, ensuring data isolation within the same legal entity.

---

Prerequisites

Before assigning admin permissions at the business unit level, make sure that Business Units are already created in your HRStop account.

You can create them by navigating to Control Panel → Settings → General, and scrolling down to the Business Unit section.

For detailed steps, refer to [How to Create Business Units in HRStop].

Once at least one business unit is created, it automatically appears in the Admin Permissions section under Security Settings for assignment.

---

Step by step: how to assign admin permissions at the business unit level

Note: Only administrators with access to the Settings and Security modules can assign admin permissions at the business unit level.

1. Log in as an Administrator who has permission to manage the Settings module.
2. Navigate to: Control Panel → Settings → Security.
3. Scroll down to the Admin Permissions section.
4. On the right side, locate the section to assign permissions.
5. Select the employee who should have admin access from the dropdown list.
6. Choose the admin permissions to assign from the multi-select dropdown based on access requirements.
7. Select the Business Unit(s) against which permissions should be assigned.
8. Click Submit to save the changes.
9. The employee must log out and log in again to see the updated administrative access in their account.

---

Example

Let’s consider Grade Developers Infotech Pvt. Ltd., which offers two product verticals under one legal entity — HRStop Cloud and HRStop On-Prem Services.

• Administrator A is assigned to HRStop Cloud and can manage only employees and settings related to that vertical.
• Administrator B is assigned to HRStop On-Prem Services and can manage only employees linked to that division.
• Administrator C, who has access to all business units, can view and manage employees across both HRStop Cloud and HRStop On-Prem Services.

This setup ensures each business vertical operates with its own administrative independence while keeping overall control centralized under one legal entity.

---

Pro tips

• Make sure that every employee’s profile is correctly tagged to their Business Unit before assigning admin permissions.
• Review business-unit-based permissions periodically to reflect organizational or vertical changes.
• Business Unit permissions are ideal for organizations managing multiple product or service lines under one company.

---

Related articles

• How to Create Business Units in HRStop
• How to Grant Administrator Access in HRStop
• How to Assign Admin Permissions at Location Level
• How to Assign Admin Permissions at Entity Level