Validate identity through JWT access, refresh tokens and current-user context before protected access begins.
Security software for controlled HRM access and administration.
Operentra HRM protects workforce data with users, roles, permissions, backend guards, audit logs, login history, document access rules, backups, health checks and administration safeguards.

Keep every sensitive HR action governed and reviewable.
Security turns platform access into a defensible workflow: user setup, role assignment, permission checks, document access control, audit review, login monitoring, admin safeguards and maintenance operations.

From sign-in to audit review, access stays permission-backed.
The Security module connects authentication, role assignment, permission guards, audit history, document rules, admin controls and platform maintenance so every sensitive HRM action has a clear control point.
Attach one or more company-scoped roles to each user so access follows job responsibility.
Use backend permission guards and frontend permission checks to protect actions and hide unavailable controls.
Inspect audit logs, login history, email logs and SMS logs for operational and security accountability.
Manage backups, health checks, SMS gateways, system roles and high-impact administration settings.
Ten security areas that keep HRM access controlled.
Access Control
Manage HRM users, roles and permissions from one governed access console.
Open featureRole-Based Permissions
Combine role assignments into effective permissions for every signed-in user.
Open featureUsers & Roles
Create users, link employees, reset passwords and assign one or more roles.
Open featurePermission Groups
Organize module permissions into grouped role sets with clear select-all controls.
Open featureAudit Logs
Review entity changes, administrative actions, email logs and SMS logs.
Open featureLogin Activity
Track sign-ins, sign-outs, password changes, token refreshes and impersonation.
Open featureDocument Access Rules
Control who can view, upload and delete employee document records.
Open featureAdmin Controls
Protect critical settings, super-admin access, role changes and impersonation.
Open featureSystem Administration
Operate audit, backups, health checks, SMS gateway and platform services.
Open featureMaintenance Settings
Configure backup schedules, destinations, restore checks and service health.
Open featureDocumentation-backed RBAC
Security content follows the HRM documentation: users receive roles, roles contain permissions and protected API actions check effective permissions before access is allowed.
Guarded by backend and UI
JWT authentication, permission guards and frontend permission checks work together so hidden UI controls are still backed by protected API enforcement.
Audit-ready administration
Business audit logs, login activity, email logs and SMS logs preserve operational evidence for sensitive account and record changes.
Operational safeguards
System roles, super-admin continuity, backups, health checks and SMS configuration stay behind deliberate administration controls.
See how Security fits your HR operation.
Map user roles, permission groups, audit review, document access and administration controls to your HRM rollout.
What HR and IT teams value in Security.
Security gave us a clean way to separate HR, payroll, department head and employee access. The role model is easier to explain and safer to maintain.
Users and roles are now managed from one place. We can deactivate accounts, reset passwords and preserve history without losing audit context.
Audit logs and login activity make sensitive changes easier to review. Our team can see who accessed the platform and what changed.
Permission groups helped us create focused custom roles without scanning a flat list. It made access reviews much faster.
System administration brings backups, health checks and logs into the same operational layer, which gives IT and HR a clearer support path.
Security FAQs
Security covers access control, users, roles, permissions, permission groups, audit logs, login activity, document access rules, admin controls, system administration and maintenance settings.
Users receive roles, roles contain permissions, and protected actions check the signed-in user's effective permission list before allowing access.
Yes. A user's effective permissions are the union of all permissions granted by assigned roles.
Yes. The six seeded system roles cannot be deleted, though their permission assignments can be adjusted for company needs.
Security administration can review business audit logs, login activity, email logs, SMS logs, backups and service health checks.