Authorization concept

The authorization concept in Nesto enables you to allow certain functions for each employee. Either predefined roles can be used for this or rights can be assigned individually.

Where can I find the system access??

System access must be activated for each employee and can be found in the navigation menu under Employees > Master Data - then select an employee and navigate to the System access tab. Employees must have an e-mail address stored for access, as this is required to activate an account. If an e-mail address is stored, system access is granted in the first step.

How can I assign rights to an employee?

The prerequisite for assigning authorizations is that the employee has access to Nesto. A distinction is then made between the authorizations of the employee app and the authorizations of Nesto Backoffice.

User roles can be assigned in Nesto Backoffice.

Can rights also be assigned individually?

Yes, it is generally possible to grant each user more or fewer rights. If a role has too few rights, additional rights can be added. Conversely, if a role has too many rights, you can simply select a role with fewer rights or no rights for the employee and then assign them individual rights. However, user roles themselves cannot be customized.

Can an employee have different rights at different locations?

Yes, the rights are assigned per location. For example, an employee can have the manager role at one location, the assistant role at another location and only one right (e.g. control of recorded working hours) at a third location.

Which role has which rights?

Brief description of the roles:

Admin

Usual role in the company: Nesto manager or management

Rights include: Granting back office rights, distributing new administrator roles, processing requirements planning

Manager

Usual role in the company: Person responsible for an organizational unit, e.g. operations management

Rights include: Full access to employee master data, all operationally necessary rights, creation of new employees, rights for the employee app (but no rights for the back office), daily closing, approval of duty rosters

HR manager

Usual role in the company: HR manager

Rights include: Full access to employee master data and the back office, assignment of further back office rights, payroll details, access to individual evaluations

Controller

Usual role in the company: Controller, area manager

Rights include: Viewing duty rosters and key figures, reopening completed days

Assistant

Usual role in the company: Employees who perform initial management tasks

Rights include: Checking and correcting recorded working times, creating duty rosters (but not granting approval) 

Detailed information on the rights of a user role:

[1] View planning-relevant data for other locations: This right enables you to view the availabilities, planned and recorded working times of employees who are loaned to other organizational units.

[2] System access: Basic access to the system (log in, change password, etc.)

[3] Nesto back office: Only authorizations and roles that are assigned to you can be assigned.

[4] Employee list: Only master data that can be viewed can be exported.

[5] Support assignments: Overview of borrowed employees and the hours worked

[6] Total annual surcharges: A comparison of the actual surcharges earned and the flat-rate surcharges paid out.

[7][8] Other planning settings: overwrite sales forecast, temporary staff can be scheduled above maximum hours