Table of contents
- Introduction
- Types of activities carried out by the roles
- How do you add/delete roles and accesses for added team members?
- Permissions in Custom Attributes
- The most common use cases of permissions needed and suggested settings
- Additional questions
Introduction
Accesses in Primetric regulate the entire system. The administrator decides on the rights of managers and employees, and managers influence how employees use the platform. To use an analogy, it is a kind of permissions tree. Please watch the animation below before proceeding to the following parts of the lesson. It will explain the essential rights and correlations between the Administrator, Manager, and Employee roles.
In Primetric, you can find three different types of roles.
- Administrator role,
- Employee role,
- Manager role.
Moreover, as you can see in the pictures below, Employee and Manager roles have different types of data access (Picture 1: Employee Rights, Picture 2: Manager Rights).
Picture 1: Employee Rights
Picture 2: Manager Rights
Types of activities carried out by the roles
For the best adjustment of people to their roles, you can find a summary of the most important activities carried out by individual roles.
Administrator
| Administrator’s Rights | ||||
| Managing Accounts | Managing Integration | Managing Organization’s Data | Managing Subscription | Managing Organization’s Notifications |
| Creating accounts for team members | Enabling integrations | Configuring default timezone | Setting up a payment method | Enabling/Disabling Time Off Requests |
| Configuring roles in the platform | Generating API key | Configuring currency | Managing pricing plan | |
| Deactivating and activating users | Installing integrations | Configuring capacity | Updating Billing Address | |
| Granting access for the specific views | Uninstalling integrations | |||
Employee
| Employee’s Rights | ||
| Platform Access | Profile Access | Timesheet Access |
| Setting Up Employee Profile | Logging work | |
| Filling in experience, hard and soft skills, languages, education, and certificates | Check on current and planned assignments | |
| Creating new skills in groups of skills created by managers | Accessing Timesheets | |
| Requests Time Offs | ||
Manager with platform access (without additional rights granted)
| Granted permissions | Can | Cannot |
| Manager with platform access (without additional rights granted) | create and manage projects in the context of time (only in the Project to which he is assigned or created) | edit duration dates, type, capacity, and title of the employee's contract |
| create allocations in projects (only in the Project to which it is assigned or created) | see financial data | |
| create work time estimates (only in the Project to which he is assigned or created) | edit employee profile | |
| add vacancies in projects (only in the Project to which he is assigned or created) | add time offs | |
| can create a timesheet report (only from Projects to which he is assigned or created) | see non-timesheet reports | |
| see all team members | ||
| see the availability of all team members | ||
| see assignments of people in projects of which he is not the manager | ||
| see data from People -> Employee -> Profiles | ||
| print Blind CVs | ||
| see added time offs |
Manager HR Access
| Granted permissions | Can | Cannot |
| HR | edit employee profile | edit nor see any financial information including Employee Hour Rate and Monthly Cost |
| edit duration dates, type, capacity and title of the employee's contract | ||
| accept all time offs in the organization | ||
| add time offs for employees | ||
| generate Vacancies report | ||
| add employees |
Manager Projects - person default rate
| Granted permissions | Can | Cannot |
| Projects - person default rate | if the project has "hour rate source" set as "Employee/Contractor project default," Enabling this permission allows you to set and change it "Set person default hour rate" for employees in this project |
Manager - All projects read
| Granted permissions | Can | Cannot |
| All projects read | see all projects in the project list in the Projects tab (including those for which you are not the manager) | |
| see all projects in the Timesheet report (including those for which he is not the manager) along with their worklogs |
|
Manager - All projects write
| Granted permissions | Can | Cannot |
| All projects write | edit all projects (including those of which you are not the manager) |
Manager-person cost restricted
| Granted permissions | Can | Cannot |
| Person cost restriced | see the hour rate and income of all employees in your projects | View/edit the income of people other than your financial manager |
| see the hour cost and cost of people whose financial manager he is | ||
| settle the assignments of people for whom I am the financial manager | ||
| edit financial estimates in a project | ||
| see financial data in your projects, excluding people who are not a financial manager | ||
| generate the "Projects finances" report excluding the costs of people for whom I am not the financial manager and the margin | ||
| see the margin on his project if he is the financial manager of all people in this project | ||
| generate a "Projects progress" report excluding the costs of people for whom I am not the financial manager and the margin. |
How do you add/delete roles and accesses for added team members?
- Go to the People Tab in the Administrator role and click on the chosen team member
- Click Install
- Grant specific permissions.
Permissions in Custom Attributes
Adding or editing Custom Attributes according to instructions in the article, you'll notice configurable permissions related to given Custom Attribute:
Below you will find some tips on how permissions configuration works in this case:
🔵 If permission to read will be unmarked for any group, permission to write will be unmarked automatically.
🔵 If the financial data checkbox will be marked, then permission for everyone will be unmarked automatically.
🔵 If attributes are marked as required, the “Do nothing” propagation option will be unavailable. It means that required attributes must be propagated for empty or to all forms.
🔵 Description for attributes are visible only for the Administrator Custom attributes panel.
🔵Financial data - checkbox to mark attribute as financial, which means it will be visible only for managers with finance permission.
The most common use cases related to granting permissions to managers and suggested settings
Use Case 1: The manager is supposed to add new people and configure their contracts.
Solution: HR + Finance Access
This use case often concerns HR or People Managers.
Use Case 2: The manager should only see his projects and their income, not the people's costs.
Solution: Finance Person Cost Restricted. + selected reports + Organizational fields as needed
Remember to configure assigned managers in projects so that the data view in the application reflects the actual division of responsibilities in the company
Use Case 3: The manager can see only the finances, including cost rates of people to whom he's assigned as a Finance Manager
Solution: Finance + Person Cost Restricted + Assigned Finance Manager
This use case often concerns more managers than team leaders.
Use Case 4: The manager must access all organizational and financial data.
Solution: Organization + Finance rights
After checking the Organization checkbox, all smaller options listed below will be selected automatically.
Use Case 5: The manager should only have access to his projects and the company's finances.
Solution: Finance Rights + Assigned Manager in selected projects.
Use Case 6: The manager can only access selected projects and not see any financial data.
Solution: Platform Access (no additional rights granted) + Assigned Manager in selected projects.
Use Case 7: The manager can see and edit all projects, create allocations, and edit start and end dates.
Solution: Platform Access (No Checkboxes) + All Projects Write + All Projects Read
Thanks to this option, you don’t have to assign an employee to each project as an assigned manager.
Additional questions
What happens if I remove the Employee role for a specific team member?
All assignments and data that were inputted to the platform will be ERASED. This is why it is essential not to delete people if you want to save past data!
I don't want to see people not currently working for the company, but I want to keep the data associated with them
If you don't want to see/manage team members in the Manager role but save past data, end the contract duration in the People Tab -> Person -> Settings Tab in the Manager role. You will find it in the following lessons.
I have an HR Manager access. Why can't I set nor see the Employee's Salary?
Only people with Finance Access (or Organization) can see and edit financial information associated with employees or projects. To get the proper access, please get in touch with your Administrator.
Can Organization Manager edit any project?
Yes, as an Organization Manager you have the power to see and edit all projects.
Do normal managers see people's assignments from other projects?
Yes, they see that some people have assignments in different projects, but without any details. Thanks to that you can easier plan your people's work if they work also in another project with another manager.
Can I choose a Manager that will be responsible for a specific employee?
What is the advantage of such a solution? "Yes, you can easily assign a manager to a specific employee. Thanks to that, when Employee wants to request time off Primetric will automatically fill in the ""Send a request to:"" field. To assign a manager to Employee you need to have HR access enabled. After that, you need to:
- Go to the People tab in the Manager role
- Select specific employee
- Go to the employee profile
- Select the "Assigned Manager"