diff --git a/app.py b/app.py
index c936c75..d10c286 100644
--- a/app.py
+++ b/app.py
@@ -5320,7 +5320,7 @@ def verification_review():
     """Admin page to review pending photo verifications"""
     try:
         # Only admins can access
-        if session.get('role') != 'admin':
+        if session.get('role') not in ['admin', 'payroll']:
             flash('Unauthorized access.', 'error')
             return redirect(url_for('dashboard'))
         
@@ -5382,7 +5382,7 @@ def update_verification_status(record_id):
     """Update verification status (approve/reject)"""
     try:
         # Only admins can update
-        if session.get('role') != 'admin':
+        if session.get('role') not in ['admin', 'payroll']:
             return jsonify({
                 'success': False,
                 'message': 'Unauthorized access'
diff --git a/templates/base_authenticated.html b/templates/base_authenticated.html
index c69a031..c890b42 100644
--- a/templates/base_authenticated.html
+++ b/templates/base_authenticated.html
@@ -73,6 +73,11 @@
                 <i class="fas fa-chart-line"></i>
                 <span class="menu-text">Reports</span>
               </a>
+              <a href="{{ url_for('verification_review') }}" 
+                class="menu-item {% if request.endpoint == 'verification_review' %}active{% endif %}">
+                <i class="fas fa-camera-retro"></i>
+                <span class="menu-text">Verification Review</span>
+              </a>
               <a href="{{ url_for('time_attendance_dashboard') }}" 
                 class="menu-item {% if request.endpoint and (request.endpoint.startswith('time_attendance') or request.endpoint.startswith('import_time_attendance')) %}active{% endif %}">
                 <i class="fas fa-clock"></i>
@@ -105,6 +110,11 @@
                 <i class="fas fa-chart-line"></i>
                 <span class="menu-text">Reports</span>
               </a>
+              <a href="{{ url_for('verification_review') }}" 
+                class="menu-item {% if request.endpoint == 'verification_review' %}active{% endif %}">
+                <i class="fas fa-camera-retro"></i>
+                <span class="menu-text">Verification Review</span>
+              </a>              
               <a href="{{ url_for('time_attendance_dashboard') }}" 
                 class="menu-item {% if request.endpoint and (request.endpoint.startswith('time_attendance') or request.endpoint.startswith('import_time_attendance')) %}active{% endif %}">
                 <i class="fas fa-clock"></i>