Skip to main content

User Permissions

Understanding Role-Based Access​

Access to data and actions (create, edit, delete) depends on your role:

  • Owner: Full control. Can manage organization settings, members, employees, shifts, time off, time logs, departments, employment types, time clock devices, and exports. Can delete the organization. Use sparingly; every org must have at least one owner.
  • Admin: Same day-to-day control as owners (employees, shifts, time off, time logs, settings, members, devices, exports) but cannot delete the organization or change owner roles.
  • Manager: Can manage schedules, time off, time logs, and employees within their permissions. Cannot manage organization settings or members. Useful for team leads and supervisors.
  • Viewer: Can view data only. Cannot create, edit, or delete anything.

See Roles and Permissions for detailed permissions and when to use each role.

Data Visibility by Role​

  • Employees, shifts, time off, time logs: Viewers see them; managers and above can edit (and add / delete where the app allows). Owners and admins have the broadest access.
  • Organization settings (e.g. departments, employment types, time off types, devices): Owners and admins only. Managers and viewers do not manage these.
  • Members and invitations: Owners and admins only. They invite, remove, and change roles.
  • Profile: You can update your name, email, and language, and delete your account. Password change is not in-app; use password reset or contact your admin. See Profile & Account Settings, Managing Your Profile.

Filters (e.g. by department, employee, date) apply within what your role allows. You never see other organizations' data.

Organization Data Isolation​

  • One organization at a time: When you use the dashboard, you work in a single organization. The organization switcher (e.g. in the header) lets you switch between organizations you belong to.
  • Strict separation: Organization A's employees, shifts, time off, time logs, and settings are invisible to Organization B. The database enforces this (row-level security). No cross-org access.
  • Time clock: Each time clock device is tied to one organization. Employees check in only for that organization. PINs are per organization.
  • Exports: Schedule Print / Export (and filtered Time logs views) reflect only the current organization. There is no "export all orgs" combined export.

If you need data in another organization, you must switch to that organization and export or view it there. Employees cannot be transferred between organizations; add them in the new org and deactivate in the old one if needed. See Organization Management, Employee Management, Organization Questions (FAQ).

Next: Glossary