Unified Staff Access: Super Admin enrollment
Sign in using the designated administrator's Google account. The system will verify Google's signed identity token and display the account's permanent Google identifier. This does not activate administrator access.
Staff self-service: My Employee ID (submissions currently disabled)
Staff Access Management
Read-only overview. Staff identities, permissions, approvals and assignments cannot be changed here yet.
Administrative access remains disabled pending rollout approval.
Application permissions
| System | Approved staff |
|---|
Staff assignments
| Area | Staff |
|---|
Staff Registry Review
Read-only onboarding queue. Identity verification and assignment approvals require separate audited workflows.
Directory review not loaded.
| Employee ID | Name | Position | Area | Account | Identity link | Assignment | Approved apps | Review |
|---|
Staff details
Verification requirements
Review only. Google identity linking, municipality validation, and application approvals cannot be completed from this page yet.
Employee ID Approval Queue
Administrator-only, read-only view of staff-submitted Employee IDs. Approval and rejection are not enabled yet.
Review queue not loaded.
| Staff ID | Staff | Municipality | Existing Employee ID | Submitted Employee ID | Submitted | Status | Review action |
|---|
These are unverified claims. Do not use for payroll, attendance, or account authorization.
DTR Employee ID Reconciliation
Read-only candidate matching. Results are not authoritative and no employee numbers will be updated automatically.
Reconciliation not run.
| Internal Staff ID | Existing Employee ID | Candidate Employee ID | Review status |
|---|
Copy this identifier to the dedicated Apps Script project's protected Script Property SUPER_ADMIN_GOOGLE_SUB. Then deliberately set SUPER_ADMIN_ENABLED to TRUE after security review. Do not share tokens or HMAC secrets.