Last updated: Mar 4, 2026, 3:48 PM
Security roles in Toast Payroll are similar to permissions in Toast Web. Security roles allow you to manage what pages and information your staff can view and what functions they have available to them, such as approving timesheets or running payroll. Security roles can also give your staff (typically managers and HR personnel) access to other employee information as needed.
Note: Standard security roles cannot be edited. If you would like permissions that do not align with the standard issued roles, Toast Payroll Pro is required in order to create custom security roles.
✅ indicates that the security role can perform this action on all employees (unless noted). ❌ indicates they cannot.
| Task | Employee | Manager | HR+ |
| Hire new employees / Add team members | ❌ | ✅ Only at the employee security role | ✅ |
| Update employee email addresses | ✅ Self only | ❌ | ✅ Only when the email address is unverified |
| View an employee's pay | ✅ Self only | ✅ Can only view employees within reporting structure* | ✅ |
| Assign and edit a job's pay | ❌ | ✅ Can only view employees within reporting structure* | ✅ |
| View a employee's payment method | ✅ Self only | ✅ Can only view employees within reporting structure* |
| ✅ |
| Set or update direct deposit information (Toast Payroll: Get Help With Direct Deposit Amounts) | ✅ Self only | ❌ | ✅ |
| Set a paper check payment method | ✅ Self only | ✅ Can only view employees within reporting structure* | ✅ |
| Add recurring earnings and deductions | ❌ | ❌ | ✅ |
| Run payroll (Toast Payroll: Run Your Payroll) | ❌ | ❌ | ✅ |
| View and edit personal profiles (Toast Payroll: Update Employee Profile Information) | ✅ Self only | ✅ Can only view employees within reporting structure* | ✅ |
| Fill out Section 1 of Form I-9 (Toast Payroll: Complete Form I-9) | ✅ Self only | ❌ | ✅ |
| Fill out Section 2 of Form I-9 (Toast Payroll: Complete Form I-9) | ❌ | ✅ Can only view employees within reporting structure* | ✅ |
| Quick Calcs | ❌ | ❌ | ✅ |
| View reports (Toast Payroll: Optimize the Report Library) | ❌ | ✅ Limited set of reports available. Can only view employees within reporting structure* | ✅ |
| Approve timesheets (if applicable) (Toast Payroll: Manage Timesheets) | ❌ | ✅ Can only see employees within reporting structure* | ✅ |
*Can only view employees within reporting structure indicates the employee must be a direct report of the manager in order for the manager to access the Task above. To view who an employee reports to, navigate to their profile and scroll down to the Reports To tile. If you need to set who an employee reports to, read Toast Payroll: Update Positions.
This is typically performed only by HR+ users. To manage admin access and security roles:
Note: Custom security roles are only available for Toast Payroll Pro accounts. Chat with us via the blue chat button in the lower-right corner of any Toast Payroll page if you'd like to upgrade to Toast Payroll Pro.
Custom security roles can be used for a number of reasons. In order to create a custom security role for your company, fill out this form and send it to us via the blue chat dot. The Customer Care team will work with you to correctly add and assign this new security role to your company database.
All HR+ and Manager-level security roles can see and edit pay for primary and secondary roles. Managers can only see and edit pay changes for employees who report to them ().