Actor: System Administrator or authorized user

حسب المصدر الأساسي HRM V1.0c — As a System Administrator or authorized user, I want to manually enable or disable the Multi-Company feature, so that I can control whether the system operates in single-company or multi-company mode.

As a System Administrator or authorized user, I want to manually enable or disable the Multi-Company feature, so that I can control whether the system operates in single-company or multi-company mode.

Actor: System Administrator or authorized user

حسب المصدر الأساسي HRM V1.0c — As a System Administrator or authorized user, I want to select one or more companies to work with simultaneously, so that I can view and operate on data scoped to exactly the companies relevant to my current task.

As a System Administrator or authorized user, I want to select one or more companies to work with simultaneously, so that I can view and operate on data scoped to exactly the companies relevant to my current task.

Actor: System Administrator

حسب المصدر الأساسي HRM V1.0c — As a System Administrator, I want to define my company's working model (working days, weekend pattern, working hours/shifts, and holiday calendar), so that the platform adapts to my industry and country instead of assuming a fixed schedule.

As a System Administrator, I want to define my company's working model (working days, weekend pattern, working hours/shifts, and holiday calendar), so that the platform adapts to my industry and country instead of assuming a fixed schedule.

Actor: System Administrator

حسب المصدر الأساسي HRM V1.0c — As a System Administrator, I want a guided, step-by-step wizard to create a new Company with all its legal, financial and localization data, so that every company in the system is fully and consistently configured before it goes live.

As a System Administrator, I want a guided, step-by-step wizard to create a new Company with all its legal, financial and localization data, so that every company in the system is fully and consistently configured before it goes live.

Actor: System Administrator or authorized user

حسب المصدر الأساسي HRM V1.0c — As the System, I want to automatically generate a unique HR ID for each new employee, scoped to their company, so that employees have a stable internal reference number without manual numbering by HR.

As the System, I want to automatically generate a unique HR ID for each new employee, scoped to their company, so that employees have a stable internal reference number without manual numbering by HR.

Actor: System Administrator

حسب المصدر الأساسي HRM V1.0c — As a System Administrator, I want to browse a flat, searchable library of every atomic permission code that exists in the system, so that I can understand and audit access without opening the full menu tree.

As a System Administrator, I want to browse a flat, searchable library of every atomic permission code that exists in the system, so that I can understand and audit access without opening the full menu tree.

Actor: System Administrator

حسب المصدر الأساسي HRM V1.0c — As a System Administrator, I want a Role to be strictly a named bundle of Permissions, so that granting access is composable and auditable without a Role also silently acting as a user directory.

As a System Administrator, I want a Role to be strictly a named bundle of Permissions, so that granting access is composable and auditable without a Role also silently acting as a user directory.

Actor: System Administrator

حسب المصدر الأساسي HRM V1.0c — As a System Administrator, I want to bundle one or more (Role, Department, Company) grants into a named Group and assign a person to more than one Group at once, so that department-scoped access works across companies and isn't capped at one Group per person.

As a System Administrator, I want to bundle one or more (Role, Department, Company) grants into a named Group and assign a person to more than one Group at once, so that department-scoped access works across companies and isn't capped at one Group per person.

Actor: System Administrator

حسب المصدر الأساسي HRM V1.0c — As a System Administrator, I want to grant or explicitly deny individual Permissions to a specific User, so that I can handle exceptions without restructuring Roles or Groups.

As a System Administrator, I want to grant or explicitly deny individual Permissions to a specific User, so that I can handle exceptions without restructuring Roles or Groups.

Actor: System Administrator

حسب المصدر الأساسي HRM V1.0c — As a System Administrator, I want Department-level scoping combined with an unbreakable Company-level ceiling, so that no combination of Groups can ever let someone see another company's data.

As a System Administrator, I want Department-level scoping combined with an unbreakable Company-level ceiling, so that no combination of Groups can ever let someone see another company's data.

Actor: System Administrator

حسب المصدر الأساسي HRM V1.0c — As a System Administrator, I want to mark specific fields (salary, national ID, bank account) as sensitive and restrict visibility by Group independent of record-level access, so that seeing a record doesn't mean seeing every field on it.

As a System Administrator, I want to mark specific fields (salary, national ID, bank account) as sensitive and restrict visibility by Group independent of record-level access, so that seeing a record doesn't mean seeing every field on it.

Actor: System Administrator

حسب المصدر الأساسي HRM V1.0c — As a System Administrator, I want a system-wide, company-scoped emergency toggle to disable export/download functionality entirely, so that I can respond immediately to a data-security incident.

As a System Administrator, I want a system-wide, company-scoped emergency toggle to disable export/download functionality entirely, so that I can respond immediately to a data-security incident.

Actor: System Administrator

حسب المصدر الأساسي HRM V1.0c — As a System Administrator, I want employee self-profile visibility governed by the standard Permission system, so that this access follows the same audit and inheritance rules as everything else instead of being a special-cased checkbox.

As a System Administrator, I want employee self-profile visibility governed by the standard Permission system, so that this access follows the same audit and inheritance rules as everything else instead of being a special-cased checkbox.

Actor: System Administrator

حسب المصدر الأساسي HRM V1.0c — As a System Administrator, I want to define reusable Roles as a Module × Permission matrix (View, Create, Edit, Delete, Approve, each independently toggleable) with a Scope per Role (Company-wide, Reporting-line, or Project-based), and assign people to those Roles, so that access across the system is granted consistently and can be audited at a glance, instead of being pieced together from route-level visibility toggles set one role at a time.

As a System Administrator, I want to define reusable Roles as a Module × Permission matrix (View, Create, Edit, Delete, Approve, each independently toggleable) with a Scope per Role (Company-wide, Reporting-line, or Project-based), and assign people to those Roles, so that access across the system is granted consistently and can be audited at a glance, instead of being pieced together from route-level visibility toggles set one role at a time.

Actor: System Administrator

حسب المصدر الأساسي HRM V1.0c — As a System Administrator, I want to create or edit a user account — covering identity, insurance, salary, contract, and system access — through a short, five-step guided flow, so that I can enter data in clear groupings without either a long single-scroll form or an overly fragmented wizard.

As a System Administrator, I want to create or edit a user account — covering identity, insurance, salary, contract, and system access — through a short, five-step guided flow, so that I can enter data in clear groupings without either a long single-scroll form or an overly fragmented wizard.

Actor: System Administrator holding the users.import permission

حسب المصدر الأساسي HRM V1.0c — As a System Administrator holding the users.import permission, I want to bulk-create or bulk-update user accounts from an Excel/CSV file built on the system's real import template, so that onboarding a batch of new hires — or updating a batch of existing records after a reorg — doesn't require entering each one manually through the Add/Edit User wizard.

As a System Administrator holding the users.import permission, I want to bulk-create or bulk-update user accounts from an Excel/CSV file built on the system's real import template, so that onboarding a batch of new hires — or updating a batch of existing records after a reorg — doesn't require entering each one manually through the Add/Edit User wizard.

Actor: System Administrator

حسب المصدر الأساسي HRM V1.0c — As a System Administrator, I want to generate a professional account for a Pre-Employee with an auto-generated login email and a securely delivered set-password link, so that I can onboard a new hire into the system without ever typing or holding their password myself.

As a System Administrator, I want to generate a professional account for a Pre-Employee with an auto-generated login email and a securely delivered set-password link, so that I can onboard a new hire into the system without ever typing or holding their password myself.

Actor: user

حسب المصدر الأساسي HRM V1.0c — As a user, I want to sign in with my Email or Username and Password, protected against repeated failed attempts, so that only legitimate credential holders can reach the workspace.

As a user, I want to sign in with my Email or Username and Password, protected against repeated failed attempts, so that only legitimate credential holders can reach the workspace.

Actor: System Administrator

حسب المصدر الأساسي HRM V1.0c — As a System Administrator, I want a permission or Role change to take effect on a user's very next request rather than waiting for their next login, so that "takes effect immediately" — promised throughout the Access Control Framework — is actually true.

As a System Administrator, I want a permission or Role change to take effect on a user's very next request rather than waiting for their next login, so that "takes effect immediately" — promised throughout the Access Control Framework — is actually true.

Actor: authenticated user

حسب المصدر الأساسي HRM V1.0c — As an authenticated user, I want my Home page to show only the modules and widgets relevant to my Role, with sensitive figures masked until I ask to see them, so that the first thing I see after logging in is useful and safe to have open, not a wall of tabs most of which don't apply to me.

As an authenticated user, I want my Home page to show only the modules and widgets relevant to my Role, with sensitive figures masked until I ask to see them, so that the first thing I see after logging in is useful and safe to have open, not a wall of tabs most of which don't apply to me.