Administration
Roles and permissions
What each role can do, and how to change roles or create your own.
A role is a set of things people can do. Each member holds one or more roles, and can do everything any of their roles allows. You need the Create, rename and change roles permission to change roles.
The starting roles
| Role | Typically for | Can do, by default |
|---|---|---|
| Tenant Owner | Whoever runs the organisation | Everything. Always, including anything added in future |
| Admin | Day-to-day administration | Everything |
| Finance | Finance and billing | Rates, billing, write-offs, financial reports and exports |
| Project Manager | People running projects | Projects, tasks, budgets, approvals, the team's timesheets |
| Resource Manager | People planning resourcing | Booking people onto projects, utilisation |
| Timesheet user | Everyone who records time | Recording their own time |
These are only a starting point: rename them to match how your organisation works.
Organisations that started before October 2026 have Consultant in place of Timesheet user. It's the same role, and you can rename it.
Who can see rates
Seeing money is a permission, not a fixed rule. Three separate permissions control:
- charge rates and billing values, what clients pay;
- cost rates and margin, what people cost;
- pay rates, what people are paid.
By default, Timesheet users see none of these.
Adding a role that works like another
To have, say, Consultant and Support team roles that can do the same as Timesheet user:
- Open Administration → Roles and select New role.
- Under Start from an existing role, choose Timesheet user and select Use its permissions.
- Name the role, change any permissions you need to, and select Save.
Copying is a one-off: later changes to Timesheet user don't change the new role.
Changing a role
- Open Administration → Roles.
- Select Edit next to the role.
- Change its name or description, tick or untick permissions, and select Save.
Tenant Owner can be renamed, but it always keeps every permission. This stops an organisation from locking itself out.
Creating and deleting roles
- Select New role, name it, choose its permissions, and select Save.
- A role can be deleted only when nobody holds it. Change those members' roles first. See Managing members.