HR Advocate utilizes role-based security, which defines access (authentication and authorization) to HR Advocate system information and to HR Advocate Web Portal. The System Administrator assigns user roles, and then permissions to the roles. When role access is changed it then applies to all users with that role. Role access can be defined by function, module, view, screen, field, record and report, or global parameters, such as location or exempt status.