Payroll & HRMS
Payroll security: role-based access, versioned rules and an audit log
Salary data is the most sensitive information most companies hold about their own people. AurumOne decides who can see and change it screen by screen, and keeps a record of what was changed.
Permissions, role by role
Every role has its own set of permissions. For each part of the system you grant access, create, update, delete, import and export separately, so an HR executive can maintain employee records without ever opening salary, and a payroll clerk can run the month without editing policies.
- Separate roles such as HR and Payroll
- Permissions per screen and per action
- Managed by an administrator, without a developer
A sign-in policy you control
The company sets its own rules: minimum password length, which character types are required, how many previous passwords are remembered, whether passwords expire, idle sign-out, the number of concurrent sessions, and whether authenticator apps or a second factor are required.
Rules with a history
Every policy the payroll engine reads is stored as a version with the date it applies from. Saving a change writes a new version with your reason. A locked payroll month keeps the values it was calculated with, so a rule change next month never rewrites what was paid last month.
Alongside that, an audit log records who changed what, and when.
In practice
AurumOne, our payroll and HRMS product
Screens recreated with sample data for a demo company. See every screen
Questions
Common questions
Can HR staff work in the system without seeing salaries?
Yes. Salary is its own area with its own permissions. A role that has not been granted access to it cannot open it.
Can we require two-factor sign-in?
The security policy includes authenticator apps and a second factor, along with password rules, idle sign-out and limits on concurrent sessions.
What happens to old payslips when we change a rule?
Nothing. Rules are versioned by effective date and a locked month keeps the values it was computed with.
Related