Settings, Roles & Security
- Product version
- Web v2.4.1
- Last updated
- 2026-10-11
Overview
Access is all-or-nothing in spreadsheets; anyone with the file sees salaries.
- Standard roles are created for every company: Company Owner, HR Admin, Recruiter, Manager, Employee. A role’s permissions now decide whether its holders can read payroll, the audit log, email templates, API keys and webhooks.
- Changing a role is guarded and recorded: the owner role stays complete, the last owner cannot lose it, and every change names who made it and who was affected.
- Two-factor can be enforced for nobody, admins and HR, or everyone; an admin can reset a teammate’s two-factor.
- Allowed email domains decide who can join the company, and invitations you sent can be resent or withdrawn.
Quick answers
What is Settings, Roles & Security in Eldalala?
Settings, Roles & Security is a module of Eldalala, the Arabic-first HR, payroll and attendance software. What it includes: Company profile and regional defaults, allowed email domains, custom fields, security and two-factor policy, roles and permissions (which now limit what staff can open), invitations, AI settings and email templates.
What problem does Settings, Roles & Security solve?
Access is all-or-nothing in spreadsheets; anyone with the file sees salaries.
Who uses Settings, Roles & Security?
Company Owner, HR Admin.
Which plan includes Settings, Roles & Security?
Every Eldalala plan includes it, the free plan too.
What can you do with Settings, Roles & Security?
Company profile, primary contact, address, regional defaults (language, country); Who can join this company (allowed email domains); Custom fields; Security settings and two-factor enforcement scope; Roles & permissions list with role assignment (owners); Role permissions now limit the admin endpoints they name; Role changes are written to the audit log; Invitations sent: resend or withdraw; and 3 more, listed on this page.
What you can do
- Company profile, primary contact, address, regional defaults (language, country)
- Who can join this company (allowed email domains)
- Custom fields
- Security settings and two-factor enforcement scope
- Roles & permissions list with role assignment (owners)
- Role permissions now limit the admin endpoints they name
- Role changes are written to the audit log
- Invitations sent: resend or withdraw
- AI settings (bring your own key, test key)
- Email templates
- Users page (invite teammates)
Screens
- 1How many permissions each role grants
- 2Who holds the role