| Role | What it allows | Billing |
|---|---|---|
| Admin | Everything: settings, users and roles, approving and reversing runs, overriding a blocking check with a reason, leave policy, AI and offline policy. Cannot approve a run they prepared (unless they are the company's only staff login). | Uses a seat |
| Preparer | Maintains employees, pay components, loans, garnishments and leave; enters casual workers' days; creates, recalculates and discards draft runs; writes the approval memo; approves other people's leave; downloads everything. Cannot approve runs or change settings. | Uses a seat |
| Viewer | Read-only: employees, runs, payslips, remittances, reports, annual returns and the audit log; downloads. | Uses a seat |
| Employee | Self-service only: own payslips, own leave balance and requests, own contact details, Ask PayTrove, offline copy of own data, own two-factor. | Free |
PayTrove user guide