Permission Levels
Permission levels have the following properties:
Property |
Description |
Name |
The name of the permission level, up to 80 characters. |
Description |
A description of the permission level, up to 255 characters. |
Status |
The status determines whether the access level appears in lists or not. This is useful if you cannot delete an access level because it is in use by one or more employees. |
General object permissions include:
Permission |
Description |
||||||||||||||
View |
Determines whether an employee with this permission level can view all or a limited subset of the objects. If set to limited then the employee must be assigned to the individual objects you wish them to see. |
||||||||||||||
Report |
Determines whether an employee with this permission level can report on all or a limited subset of the objects. If set to limited then the employee must be assigned to the individual objects you wish them to report on. |
||||||||||||||
Manage |
Determines whether an employee with this permission level can manage all or a limited subset of the objects. If set to limited then the employee must be assigned to the individual objects you wish them to manage. Management permissions include:
Note that Leave Requests do not have any sub-permissions for Manage, unlike many other objects in the system. The 'Can Manage' permission effectively gives the user the ability to view leave requests in a read-only format on the Leave Requests tab. You might use this permission if you want to allow some employees to see leave requests for planning purposes, but prefer other employees do the approvals. |
||||||||||||||
Approve |
Determines whether an employee with this permission level can approve all or a limited subset of the objects. If set to limited then the employee must be assigned to the individual objects you wish them to approve. |
Timesheet Special Permissions
There are some special timesheet permissions:
Permission |
Description |
Can view my timesheet |
If not checked, the "My Timesheet" tab will not be shown, even if the employee has a timesheet template in their employee profile. This permission is useful for simplifying the user interface for employees who meet all of the following criteria:
|
Can undo submit of my timesheet |
This applies to timesheet objects only, and determines whether an employee can unsubmit (unlock) their timesheet. Note that once a timesheet has been approved the employee will not be able to unsubmit it, regardless of this permission. Note that this permission also works in conjunction with the "Can review my timesheet only" permission (see below). If both are checked than the employee will be able to review their timesheet in a read-only manner, and will be able to "undo" and change their review. |
Can copy my previous timesheet hours |
This permission determines whether employees can have timesheet memory carry forward hours from the previous timesheet (this is set from the Home > Preferences page). This permission also determines whether the employee sees a "Copy Previous Timesheet" option on their timesheet. If this permission is off then the employee can only carry forward or copy rows from the previous timesheet. Note that if you turn this permission off, but an employee has already set their timesheet memory to carry forward rows and hours, you will need to also change their timesheet memory setting from Employees page. |
Can punch from time clock device only |
Turning this permission on will allow an employee to only punch in/out from a time clock device, ensuring their physical presence. The employee will not be able to punch in/out from a web browser. The employee will still be able to add leave to their timesheet using a web browser, however. |
Can edit my punches |
This applies to timesheets only, and determines whether an employee can edit work time entries on their timesheet. If this permission is not enabled then:
Employees will still be able to change the project or pay code, enter notes, etc. of work rows. Also, this permission does not affect leave rows - employees will be able to add leave rows to their timesheet. |
Can review my timesheet only |
This permission allows employees to see their timesheets in a read-only view, and gives them the ability to review the time entered for them. They can then accept the timesheet or report a problem. This is useful for employees working in crews where a site manager enters time for them. Timesheet reviews can only be done by the employee, and must happen BEFORE the timesheet is submitted (locked). The review is stored in the timesheet notes field. Managers can see the reviews from the Timesheets and Approvals tabs with clear icons indicating whether the employee accepted the timesheet or reported a problem. Note 1: The employee review icons are only shown for unsubmitted (unlocked) timesheets. Once submitted, the review icons are no longer shown (as the timesheet is considered processed), but the review information is still available in the timesheet notes field. Note 2: If you want to allow the employee the ability to "undo" their review, check the "Can undo submit of my timesheet" permission (see above). They will be able to undo and change their review until the timesheet is submitted (locked) by their manager. However, they will not be allowed to undo the submit of the timesheet, as the review permission only allows read-only access to the timesheet. |
Leave Request Special Permissions
There are some special leave request permissions:
Permission |
Description |
Can create my leave requests |
Employees with this permission enabled (meaning they have this permission enabled for the permission level in their employee profile) will be able to create new leave requests for pay codes they are allowed to access (based on their pay code 'Can view' permission). They will also be able to delete leave requests they created as long as they have not been marked as approved. To delete an approved leave request it must first be unapproved by an approver. |
Can create for approvees |
Employees with this permission enabled (meaning they have this permission enabled for the permission level in their employee profile) will be able to create (and delete) leave requests for employees. The list of employees they can do this for depends on their 'Can approve' leave request permission, as well as whether they are assigned as approvers to any employees in their employee profiles. Note that this permission requires the 'Can approve' permission be enabled as a pre-requisite. |