Permissions
How permissions fit together
How roles, teams, security settings, and publishing rules fit together.
Workspace access is controlled by a person’s role and team, the Security settings, and the publishing rules for timesheets.
Start with role and team
A person’s workspace role sets their normal responsibilities. Their team decides which people, projects, and timesheets fall inside that scope.
Then check these settings
- Data Access: controls cross-team visibility, access to meeting content, and who can open the Timeline.
- Organization Management: controls who can invite people and manage teams.
- Data Management: controls who can change team data, projects, workspace-wide projects, and their own personal data.
- Timesheets: controls the audience, publishing time, and manager review. The Timesheet Flags section below it sets what sends a day to review. Both are under Settings → General.
Common questions
What is the normal hourly member setup?
Members can edit and categorize their own time, submit it, and send it to manager review when the workspace requires that step.
Where do I control cross-team access?
Use Cross-Team Visibility under Settings → Security → Data Access.
Where are the timesheet publishing and review settings?
In the Timesheets section of Settings → General. Timesheet Flags has its own section just below it. There is no separate Timesheets page in Settings.
What are the default permissions in a new workspace?
Manage Users is Admins Only. Manage Teams is Admins + Managers (Managed Teams). Manage Own Personal Data is on. Cross-Team Visibility is Team Totals. Manager review is Required.