Applies to employee self-service check-in. Checking in at or after the half-day time automatically marks that day "HD" on the Attendance grid instead of "P". The late time only adds a "Late" note — it doesn't change the day's status.

Applies to the Contract ends / Probation ends dates on an employee's record, and any Expiry date set on a personal-file document. Admin and the employee's branch manager get a notification once the date falls inside this window.

Define named shifts (e.g. Morning/Evening/Night), each with its own Late/Half-day cut-off times. Assign a shift to an employee on their Add/Edit employee form — their self-service check-in then uses that shift's times instead of the default Attendance rules above. Employees left without a shift keep using the default rules.

Shift	Start	End	Late after	Half day after

Mark government/company holidays here (e.g. Poya days, National Day). Any date listed here is treated as a paid non-working day everywhere in the app: it's excluded from the Attendance grid's working-day count and, on the Payroll tab, it never reduces salary — even if that day also happens to fall on a roster leave, week off or a day someone forgot to mark. Leave "Branch" as "All branches" for a company-wide holiday, or pick one branch for a branch-specific closure day.

Date	Holiday name	Branch

No Pay and Other leave types aren't counted against a balance. Balances are calculated automatically from approved leave records — nothing to enter by hand.

If enabled, an employee's unused Annual leave from the previous calendar year is added to this year's Annual entitlement (capped at the max above). Only carries forward one year back — leave not used within that following year is forfeited, same as most company policies. Casual and Sick leave never carry forward.

Grant or revoke specific module access for the Branch manager role. Every switch below is enforced on the server too — not just hidden in the browser — so a manager account can never do more than what's switched on here, even via a hand-crafted request. Payroll always stays admin-only and isn't listed below — salary data is never exposed to a manager account, on any setting.

Module	Access	What it lets a manager do
Attendance		Edit — click cells on their own branch's Attendance grid to mark/change P/A/L/HD/R/WO (e.g. Roster leave). Off by default: view only.
Leave		Edit — approve/reject their own branch's leave requests. On by default (this is how it worked before this setting existed).
Reports		View — see the Reports tab for their own branch. Off by default: tab hidden.
Branches		View — see the Branches tab (read only — a manager can never add/edit/delete a branch, regardless of this setting). Off by default: tab hidden.

Set an alert email and an optional IP allowlist (comma-separated IPs or CIDR like 203.0.113.0/24; empty = anywhere) for an account. A wrong IP list can lock that user out, so test with a non-admin account first.

If attendance or payroll ever seems like it "isn't saving", click this first — it checks the database connection, confirms every table this app needs actually exists, and does a real write → read-back → delete test against the attendance table (using a throw-away test record, safe to run any time). Shows the exact point of failure instead of guessing.

Create a login for a branch manager (marks attendance / approves leave for their own branch only) or for an individual employee (self-service: view their own leave balance/history and apply for leave — a branch manager approves it). Neither can see or change other branches' data, and can't reach Branches, Reports or these settings.

Password: at least 8 characters, including a number or symbol.

Logins, password changes, account and payroll changes, leave approvals/rejections, and license activations — most recent first (last 200).