Does every module use the exact same four roles, or do some modules have extra permission tiers?

The same four roles (Admin, HR, Manager, Employee) apply everywhere, but individual modules layer their own finer rules on top, Succession Planning opens candidate edits to Managers, Performance and Recruitment keep creation actions to Admin/HR only, and so on. Always check the specific module's rules rather than assuming one blanket pattern.