Give an employee access to My Payroll so they can request leave and submit access so they can't see their payroll information through the employee portal..