Roles & Permissions
Control access with role-based permissions
Overview
SimplyManage uses role-based access control (RBAC) to manage what users can see and do. Understanding permissions helps you configure appropriate access for your team.
System Roles
Every user has one of three system roles that determine their base permissions:
User Role
Standard team members with basic access:
- Track time to assigned projects
- View and edit own time entries
- Submit timesheets for approval
- View own reports and analytics
- Access assigned tasks
- Update own profile
Manager Role
Team leads and supervisors with expanded access:
- All User permissions
- View team members' time entries
- Approve or reject timesheets
- Create and manage projects
- Create and assign tasks
- View team utilization
- Generate team reports
- Manage project budgets
Admin Role
Organization administrators with full access:
- All Manager permissions
- Manage organization settings
- Add and remove users
- Assign user roles
- Manage clients and billing
- Configure integrations
- View all organization data
- Access forecasting tools
Info
At least one Admin is required in every organization. Consider having backup admins for business continuity.
Permission Matrix
| Feature | User | Manager | Admin |
|---|---|---|---|
| Track own time | Yes | Yes | Yes |
| View team time | No | Yes | Yes |
| Approve timesheets | No | Yes | Yes |
| Create projects | No | Yes | Yes |
| Manage users | No | No | Yes |
| Organization settings | No | No | Yes |
| View reports | Own only | Team | All |
Project-Level Permissions
Beyond system roles, users have project-specific permissions based on their project role:
| Project Role | Permissions |
|---|---|
| Member | Track time, view project info |
| Lead | Member + manage tasks, view all project time |
| Manager | Lead + edit project settings, manage budget |
Tip
Project permissions are additive to system roles. A User with Project Manager role has expanded permissions for that project only.
Changing User Roles
To change a user's system role:
- Navigate to Team → Team Members
- Click on the user to open their profile
- Click Edit
- Select the new Role
- Click Save Changes
Warning
Role changes take effect immediately. Users may gain or lose access to features instantly.
Best Practices
- Principle of least privilege - Give users only the access they need
- Regular audits - Review roles periodically
- Document policies - Define when each role is appropriate
- Backup admins - Ensure multiple admins exist