The capabilities
Which roles hold what
Finance does not track time. It is a money role. Finance can post adjustments
and read the audit trail, but it has no timer in the top bar and cannot add a
time entry.
Client contacts hold nothing. A portal contact has an empty internal
capability set. They never see time entries.
Capability is not scope
time.viewOthers says you may look at other people’s time. It does not say
whose.
Supervision scope answers that second question. A Project Manager with
time.viewOthers and a scope of one group sees only that group in the member
picker. Both checks run on every read and every write.
If a teammate is missing from the picker, the capability is fine – the scope is
the thing to widen. See Supervision scope.
The cost firewall
Cost is the most sensitive number in the product, so it has its own rule.- Only
time.viewCostreveals what an entry cost. - Only Owner and Admin hold it by default.
- A Project Manager can see an entry’s billable value but never its cost.
- When you do not hold it, the cost figure is not sent to your browser at all. It is not merely hidden on screen.
rate.viewBilling for what you charge,
rate.viewCost for what a person costs. See
Rate permissions.
What each role sees
- Member
- Contractor
- Project Manager
- Finance
- Admin
- Owner
Their own timer, their own Time page, their own entries. No member
picker. No cost figures. They can submit their own period.
Custom roles and per-person exceptions
Your workspace can define its own roles with a chosen capability set. See Custom roles. Individual people can also have specific capabilities taken away. That mechanism is deny-only – it can narrow a role, never widen it. See Per-person permissions.Example
At Northwind Studio:- Sarah Lin (Member) tracks her own hours and submits her own week. She cannot see anyone else’s time and never sees a cost figure.
- Priya Raman (Project Manager) sees Sarah’s timesheet, fixes a wrong project on one entry, and approves the week. She sees that Sarah’s three hours are worth 135 they cost.
- Daniel Okafor (Finance) has no timer at all. He posts an adjustment after a client disputes an hour, then raises the invoice.
- Maya Ellis (Owner) sees the 165 margin, and closes the period at month end.
Two other gates
Capabilities are not the only thing that can hide time tracking.
Time tracking itself is a Free feature. Approving time is Pro. See
Plans and features and
Apps and modules.
A location rule can also hold back tracking while someone is off-site. That is a
state, not a permission – see Location rules overview.
Common questions
Can a Member see a colleague's hours?
Can a Member see a colleague's hours?
No.
time.viewOthers is a manager capability. A Member only ever sees their
own time.Can I give one person the ability to see cost?
Can I give one person the ability to see cost?
Cost visibility comes from
time.viewCost. Put it on a custom role and give
that person the role. Per-person overrides only take capabilities away.Why can a Project Manager not close a period?
Why can a Project Manager not close a period?
Closing a period is irreversible from that screen, so it stays with Owner and
Admin – the same tier as reopening an approval.
Can Finance track time if we want it to?
Can Finance track time if we want it to?
Not with the built-in role. Create a custom role that includes
time.track
and time.edit, and assign it.Related guides
Roles and capabilities
The full permission model.
Supervision scope
Whose data a manager can reach.
Custom roles
Build a role with the exact capabilities you want.
Track time for someone else
Using these capabilities in practice.