Settings & administration

The Settings workspace is configuration and reference, not operations. It does not run payroll, prepare payments, post accounting, or produce reports. Nothing here duplicates another workspace’s job — it configures or reports on things that already exist.

Settings has six sections: Company & workspace, Payroll, Payments, Integrations, Users & access, and System. On desktop they are a left-hand list; on narrower screens they become a tab strip.

Company & workspace

This section shows the workspace record and is the only place a company-level setting can be changed. Administrators can also create, archive and reactivate companies:

• Workspace name — editable by an Administrator. Select the field, change the name, and select Save name. The section shows an Editable badge when you can rename and a Read-only badge when you cannot.
• Workspace record — read-only: workspace identifier, status, created and last updated dates, active members, employees, currencies in use, and your role here.

Note

Base currency, timezone, registration details, tax details, and address are not stored by payIQ, so they are not offered. The section reports the currencies actually in use instead. Renaming a workspace does not change payslips or accounting handoffs that were already written — they keep the name that was true when they were created.

Your workspaces

The list shows only your active memberships, including archived companies. Switch / set default selects an active company and persists that preference for later logins. Administrators can Create workspace, which gives the creator an active Administrator membership and opens the new company immediately. Archive workspace requires confirmation: all members lose operational access, while payroll and financial history remain. Its Administrators can Reactivate it here or from the no-workspace recovery screen. There is no company delete.

Payroll

The Payroll section is READ-ONLY reference configuration:

• Statutory configuration in force — enter a Statutory date and select Check date to see the SSNIT and PAYE rules effective on that date, with their version, source, and parameters. If no single rule resolves for the date, the section says so while the rest of the page still loads.
• Reviewed statutory history — the effective-dated list of statutory rules.
• Payroll components — a count of component definitions by category, with links to manage components in Employees and to run payroll.

Statutory rules are reviewed reference data. Nothing in Settings edits them.

Payments

The Payments section is READ-ONLY:

• Payment methods — the methods payIQ supports (Bank transfer, Mobile money, Cash, Other).
• Payment destinations — active and deactivated destination counts, with a link to the Payments workspace, where destinations are managed.

There is no editable payment setting, because payIQ models no workspace payment defaults and executes no transfer.

Integrations

The Integrations section reports the state of payIQ’s recorded cross-application activity, READ-ONLY:

• LedgerIQ accounting handoff — handoffs recorded by delivery state (Pending, Emitted, Acknowledged, Failed), the latest handoff, results received, and the latest result.
• contactsIQ identity links — active links, deactivated links (kept as history), employees linked, and the link type.

Note

No credential, endpoint, token, or connection is shown or exists. payIQ records handoffs and results; it has no live LedgerIQ or contactsIQ connection.

Users & access

The member list shows name, email, role, Active/Inactive state, You and Default markers, and membership date. Administrators also see Manage members.

• Enter Member email, choose one of the existing five roles, and select Add user / member. An existing active user needs no password. A new user requires an explicitly supplied, validated password, shared securely.
• No invitation email is sent. This screen never changes an existing user’s password or account details.
• Change a member’s role with confirmation. Deactivate revokes their workspace access; Activate restores it. Remove membership is available only after deactivation and preserves the account and recorded history.
• The last active Administrator cannot be demoted, deactivated or removed, including by themselves. The controls are disabled and the server also checks.
• Default markers describe whether this company is that user’s default. Each user chooses their own default through the workspace selector; Administrators cannot choose defaults in another user’s other companies.

Administrative changes are recorded in scoped immutable history. Administrators can also review these records in Audit & Activity.

System

Administrator-only application-wide operations: process/readiness, database and migration state, release metadata, security booleans, operator backup metadata, warnings and safe diagnostics. No secrets, paths or configured hostnames are shown. See System / Operations for status meanings and recovery.

What is deliberately not in Settings

The following are not implemented and are not offered rather than faked:

• Workspace base currency, timezone, company registration, tax details, or address.
• Pay frequency or a default payroll period.
• Editing statutory rules.
• Payment-method configuration or payment defaults.
• Integration credentials, endpoints, or transport.
• Email invitation delivery, SSO, MFA, custom roles, directory sync and billing.

Who can see what here

Section	Read	Write
Company & workspace	Any active member	Administrator (name, create, archive/reactivate)
Payroll	Payroll Operator, Approver, Administrator	None
Payments	Payroll Operator, Approver, Payment/Reconciliation Reviewer, Administrator	None
Integrations	Any active member	None
Users & access	Any active member	Administrator (membership administration)
System / Operations	Administrator	None

A section your role cannot read shows a permission message naming the roles that can, rather than an empty screen. See Roles & access.