# How do I restrict employee access in Rekaz?

Source: https://help.rekaz.io/en/articles/16425440-how-do-i-restrict-employee-access-in-rekaz
Updated: 2026-08-19

Rekaz provides a Roles area where you can start a new role and avoid granting full access. Use this workflow to apply least-privilege access for employee roles.

  

The current interface does not include a control to save the role, assign users to it, or select individual permissions.

  

# Steps

1.  Select the Roles tab.
    
    _The Roles area is displayed, with the option to create a new role._
    
2.  Select Create New Role.
    
    _The Create New Role page opens._
    
3.  Enter a clear name for the restricted role.
    
    _The role name is entered in the Role name field._
    
4.  Leave Grant all permissions unselected.
    
    _The role is not configured with full access to all features and functionalities._
    

  

# Illustrated guide

**Step 1:** The Roles tab in the employee management area.

  

[![The Roles tab in the employee management area. in Rekaz](https://rekaz-794204f202e4.intercom-attachments-1.com/i/o/aahcqj2g/2618710236/ea6fcfce48266e1beb5cbc421479/e9emmx.png?expires=1787961600&signature=494caf574c97dd2d1674399e613dc57dfb588b0ce3930db2eaa5c71c5c22f904&req=diYmHs5%2FnYNcX%2FMW3nq%2BgW3DGkUvMUDq69JCAZJe8nGvRAG1v8ys8MYlTscu%0AaMqCcSscal42XgQkScYLtN3d97c%3D%0A)](https://files.catbox.moe/e9emmx.png)

  

**Step 2:** The Create New Role button in the Roles area.

  

[![The Create New Role button in the Roles area. in Rekaz](https://rekaz-794204f202e4.intercom-attachments-1.com/i/o/aahcqj2g/2618710335/14143e200d6a264b67c41780afaa/z0pq7o.png?expires=1787961600&signature=5b0cb018d29d0fa0d099dbbc9a0575ec2377127c1537a276bc4b686d9d163447&req=diYmHs5%2FnYJcXPMW3nq%2BgQHs5JNdzd7Pics70QDgpZZ045eik%2BsX79GriVkA%0A20Szlc4%2BNnUeEMmdkBlf1kONcHU%3D%0A)](https://files.catbox.moe/z0pq7o.png)

  

**Step 3:** The Role name field on the Create New Role page.

  

[![The Role name field on the Create New Role page. in Rekaz](https://rekaz-794204f202e4.intercom-attachments-1.com/i/o/aahcqj2g/2618710380/e928682ba4c8fde7d2f2ddd37b72/qe8jni.png?expires=1787961600&signature=f9caac5646aefe3324276ece11d08f83c6923654696625ea138b4ad0cd3e3859&req=diYmHs5%2FnYJXWfMW3nq%2Bge059r8fxNqSQLGsbecUxfOKjO8JoIpoLBBhB5zt%0AAmmX33AXenIU0m5FzbY8W1IojMQ%3D%0A)](https://files.catbox.moe/qe8jni.png)

  

**Step 4:** The Grant all permissions setting on the role form.

  

[![The Grant all permissions setting on the role form. in Rekaz](https://rekaz-794204f202e4.intercom-attachments-1.com/i/o/aahcqj2g/2618710418/d4b44c9635f5ac1f50280583746a/yi33b3.png?expires=1787961600&signature=003c86ea364484abaaefd51de998c91eb3df4ba2638d25fe8d96dfde7d495be4&req=diYmHs5%2FnYVeUfMW3nq%2BgUyksS8dSD2HOYaiGoryzCLEARMzuGbP6QQYgVnL%0A9iXN%2BacRuo2lNYPR2Re2qG8iKOg%3D%0A)](https://files.catbox.moe/yi33b3.png)

  

# Important access-control guidance

  

Apply the principle of least privilege: give each employee only the access required to perform their work.

  

Do not share the Owner account. Create and assign custom roles instead.

  

-   Review the Sensitive Information permission group carefully.
    
-   Recheck roles regularly and after any change to an employee’s duties.
    
-   Permissions can cover areas such as Customers, Payments, Reports, and Sensitive Information.
    
-   Leave Grant all permissions unselected when an employee does not require complete access.
    

  

# Related questions

-   How do I hide sensitive data from an employee in Rekaz?
    
-   How do I control a user’s access in Rekaz?
    
-   How do I prevent an employee from viewing reports in Rekaz?