User Roles

---

Introduction

User roles in the Timesheet app define what actions and features each user can access within the application. These roles are specific to the Timesheet app and do not affect your access to other platform applications - each app maintains its own independent role-based security system. Your Timesheet app role determines your specific privileges within the application, such as the ability to create projects, invite new users, manage clients, approve timesheets, or generate reports. Understanding your assigned role will help you navigate the features available to you and know what actions you can perform.

Note

While your basic profile information (name, email, department) comes from the platform level, your functional permissions within the Timesheet app are controlled entirely by your assigned Timesheet role.

Global Administrator

User with this role will be super user of the application. It will have access to all the projects, users, dashboard and any other information of the application. It is recommended to have limited number of users with this access as they can access all data within the application.

Full Access Capabilities:

✅ View all users (any role)
✅ Create users with any role
✅ Edit any user information  
✅ Delete any user
✅ Deactivate & Reactivate users
✅ View all invitations (from any administrator)
✅ Export all user data
✅ Import users in bulk
✅ Access all filter options (including role filter)
✅ View project allocations for any user
✅ Create, edit and delete projects of all the users
✅ Approve, reject and reopen timesheets of all the users

Project Administrator

This application level role is required for an user to be assigned as Team Leader of the project. With this application level role and Team Leader project level privileges, an user can administer a specific project. However, billing information of the project will not be accessible to this role.

Limited Access Capabilities:

✅ View users with "User" role only
✅ Create new users with "User" role only
❌ Cannot edit role of users
✅ Delete users
✅ Deactivate & Reactivate users
✅ View only invitations they sent
✅ Export user data
✅ Import users (with "User" role only)
❌ No role filtering option
✅ View project allocations for all users
✅ Can be a Team Leader of a project
✅ Can access Project dashboards with Team Leader access
❌ Cannot access Global Administrator dashboard
✅ Can view all the Clients
✅ Can create/edit/deactivate/delete clients
✅ Can be assigned as Team member of a project

User (Regular User)

This is a normal or a regular user role with basic access to the application. Users with this role can only access their own data.

No Administrative Access:

❌ Cannot access User Management features
❌ Cannot view other users' information
❌ Cannot create, edit, or delete users
✅ Can view their own profile only
✅ Can view the projects allocated to them only
❌ Cannot edit or delete projects
❌ Cannot be a Team Leader of a project.
✅ Can view the personal dashboard only
❌ Cannot view the Client information.

Permission Matrix

Feature	Global Administrator	Project Administrator	User
View All users	✅	❌	❌
View User Role users	✅	✅	❌
Create Any Role users	✅	❌	❌
Change role of users	✅	❌	❌
Create User Role	✅	✅	❌
Edit/Delete Any user	✅	❌	❌
Edit/Delete User Role users	✅	✅	❌
View All Invitations	✅	❌	❌
View Own Invitations	✅	✅	❌
Export Users	✅	✅	❌
Import users	✅	✅	❌
Role Filter	✅	❌	❌
Can be a Team Leader	✅	✅	❌
Create Projects	✅	✅	❌
View projects created by others	✅	❌	❌
Create, View Clients	✅	✅	❌
Edit, Delete, Deactivate Clients	✅	✅	❌