In any organisation, you will need to give access to individual users, in relation to their duties, bearing in mind data privacy and their day to day tasks. For example you may want the Payroll Manager to have full access to the Payroll details, but want to exclude the Payroll Administrator from seeing the Directors payroll. We will use this example below:
Go to Setups > AA. Advanced > W. Maintain Users
Here you can create a User Login ID and User Name, give them a secure password, and add a security Group to their record. You can also link each user to a specific email address so that they can send emails using that address rather than the default for a given email source. For more information please see Setting Up User Email.
Please note that you must be logged in as a user who is a member of the supervisor group.

A number of Groups are pre-loaded, which you may want to amend to suit your needs. For example the rights for a Payroll Administrator can be tailored by giving access to a Payroll Cycle or to view only Directors non-pay data. Similarly the Payroll Manager group may include rights to run the Directors payroll, but not view the Invoicing area. You would then not add the Invoicing group to the Payroll Manager Rights and they would not be able to go into the Invoicing tab.
Some groups will have Rights which are also in other Groups, for example the Payroll Admin and Payroll Manager. You will need to add both Groups to Payroll Manager if you want them to have all the Rights, as they do not automatically inherit the Payroll Admin Rights. Below is a suggestion of Rights/Groups for a Payroll Admin setup:

Example 1
An Area Manager you want to issue Stores and look up Pay Queries only.
If the Area Manager is not already on Staff - add him to Staff as an Area Manager - if he is already on Staff change the Staff Type to Area Manager.
In ‘Setups > Divisions > Area Managers’, add the Area Manager.
In ‘Users Ids’ (Adding Users – above) add them as their Staff number.
If they are in staff as 00123 their User Id MUST be 00123.
Give the employee the predefined Area Managers Group of Rights.
Now the Area Manager will only be able to see the sites controlled by him.
Example 2
Give a senior member of staff View only access to ALL clients and sites.
The easiest way is to add them as a user not enter them in Staff.
Assign Rights:
Access Company 1
Access all Clients.
Example 3
Allow employee to add new Clients, Sites and regular invoicing.
Assign Rights:
Company 1 (or 2, 3, 4,...)
Access Invoice Cycle (or 2, 3, 4,...)
Access All Clients
Clients Modify Data
Client Modify Invoice Data
Clients Add
Modify Regular Invoices
Site Amendment