Skip to main content

Manage roles and permissions: Access & Visibility

Restrict admin access based on your organizational structure, manage internal candidate visibility, and review additional access restrictions.

Overview

Access & Visibility helps Account Owners control admin visibility across the platform. When hierarchy access control is enabled, admins without the “View all users” permission can only see users within their organizational hierarchy.

From this section, you can also manage how existing users are handled when they are added to hiring campaigns as internal candidates.

Key benefits

  • Limit admin access based on HRIS-synced reporting lines

  • Review your organizational hierarchy and rebuild it when needed

  • Manage internal candidates and control whether they are notified when considered for a role

  • Review active access filters for admins in one place

  • View as user to confirm what an admin can see in the All users table


How to enforce hierarchy access control

If your organizational structure is synced to the platform via an HRIS integration, you can restrict admin access based on that structure. This means admins will only have access to their organizational hierarchy subordinates.

To do this:

  1. Navigate to Settings - Manage roles and permissions - Access & Visibility

  2. Toggle the “Enforce hierarchy access control” to on.


Note: You can only enforce hierarchy access control if your organizational structure is synced to the platform via an HRIS integration.


Important: Only Account Owners or admins with permission to view organizational hierarchy tree can access this feature.


Rebuild your hierarchy

If your organizational structure changes or you need to refresh the hierarchy after updating your HRIS data, click Rebuild hierarchy.

This rebuilds the hierarchy using the latest organizational data available on the platform.


Manage internal candidates

When Internal candidates is enabled, an existing user who is not a candidate is flagged as an internal candidate when they are added to a hiring campaign.

To enable this:

  1. Navigate to Settings → Manage roles and permissions → Access & Visibility.

  2. Turn on Internal candidates.

Internal candidates are visible within that hiring campaign. Anyone with access to the campaign can also view the internal candidate's existing assessment results and reports from within the campaign.


Notify internal candidates

When Notify internal candidates is enabled, users flagged as internal candidates receive an email informing them that:

  • They are being considered for the role

  • Their existing assessment results are visible to the hiring team

To enable notifications:

  1. Make sure Internal candidates is enabled.

  2. Turn on Notify internal candidates.


Note: The Notify internal candidates setting requires Internal candidates to be enabled.



Tree View

After the organizational structure has been synced to our platform via HRIS, a new tab called “Tree View” appears.

Use this tab to:

  • Monitor total users in hierarchy and users with access control filters

  • View reporting structure including direct and indirect reports

  • Rebuild hierarchy if your org structure changes


Note: The Tree View tab is only visible after a successful HRIS sync.


Example:

Once hierarchy access control is enabled, a manager like Cole Reyes will only see their direct reports - Eva Hart and Oscar Merritt.


Review access filters

The Access Filters tab shows which users have additional access rules applied.

Here you can:

  • View assigned filters for each user

  • Check filter logic (AND / OR conditions)

Example:

Gunnar Ellison only has access to users in the Account Manager campaign due to applied filters.


Check detailed user access

To inspect a user’s full access:

  1. Click the eye icon next to the user

  2. You’ll be taken to the User Lookup tab

  3. Click View as user

This shows the All users table exactly as that admin sees it—helpful for verifying permissions.


Tip: Use this view to quickly confirm whether access restrictions are working as expected.



How to assign access control filters in bulk


Note: Company attributes will only be available if you have an HRIS integration.


Important: You must be an Account Owner to configure access control.


Follow these steps to assign filters to multiple admins at once using bulk operations:

  1. Navigate to Settings → Manage roles and permissions

  2. Click Edit

3. Open the Access & Visibility tab

4. Under Bulk Operations, click Bulk Assign Filters

5. Select Filter columns to define which HRIS fields to include in your template

If you have an HRIS integration, company attributes will appear here. You can use them to restrict access (for example, limit admins to users within a specific global region).


Note: Campaign filters cannot be assigned in bulk. They must be added individually on each admin’s user profile, as shown here.


6. Download the CSV template

7. Add admin email addresses and corresponding filter values

8. Format your file correctly (example below using Tags as filters)


Note: To assign multiple tags as filters for a single admin, separate each value with a semicolon (;).


9. Save the file

10. Upload the file and click Upload & Process


Example

After processing:


FAQs

When can hierarchy access control be enforced?

Hierarchy access control can only be enforced if your organizational structure is synced to the platform via an HRIS integration or HRIS file upload.

Who can enforce hierarchy access control?

Only Account Owners or admins with permission to view the organizational hierarchy.

What happens when I enable hierarchy access control?

Admins will only be able to access users within their reporting structure.

Can I still use access filters with hierarchy control enabled?

Yes. Access filters can be applied alongside hierarchy controls to further refine visibility.

Can I assign campaign filters in bulk?

No. Campaign filters must be assigned individually on each admin’s profile.

What happens if an admin already has access control filters assigned?

The CSV file acts as the source of truth. Any previously assigned filters will be removed and replaced with the filters defined in the file.

Did this answer your question?