Create an Employee Profile with just Sign Up for Shift Requests (for Available Shifts) and no other Employees-group permissions, then assign it as the Permissions Role on their employee record. The Employee Dashboard itself needs no permission, only an employee record — every permission check on the dashboard's clock-in/out, break and shift endpoints is disabled in the current code — so they can clock in/out, take breaks and see their Next/Past Shifts. Without List Employees Shift Requests the Request a schedule change card will send them back to the admin home, and without the Create Events Proposals permission the Tasks card stays empty.