Document toolboxDocument toolbox

Granting permission to users

The tables below list the following types of permissions and roles:

  • Some important Jira permissions that Tempo Timesheets relies upon
  • Tempo administrative and user permissions
  • Tempo roles, such as Team Lead and Account Lead, which already include certain permissions

Important

  • For Tempo users with Approve Timesheets permissions, you must also have View All Worklogs permissions on the projects you are reviewing in order to see the worklogs of other users.
  • For Jira users to be able to access and use Tempo Timesheets, they must have Work On Issues permission for at least one JIRA project. This permission is listed below, in the 'Project permissions and roles' table.
  • For Jira users to be able to log work in Tempo Timesheets, Time tracking must be ON in Jira.
On this page

Global permissions


Permission

What you get by default


Notes

Who can give permission by default
Configuration location

Jira Administrators permission

  • Permission to:
    • Perform most Jira administrative tasks
    • Perform most Tempo administrative tasks
  • Tempo Administrators permission (see below)
  • Tempo Team Administrators permission (see below)
  • Tempo Account Administrators permission (see below)

By default, Jira Administrators are not granted Tempo Rate Administrators permission (see below). However, Jira Administrators can grant themselves any type of Tempo administrative or user permission that they do not already have.

Jira Administrators




Administration cogwheel > System > SECURITY Global Permissions

Browse Users permission

Permission to view lists of Jira user names and group names and to select users or groups from the lists.

Many users might require this permission.

Examples

  • Tempo Team Administrators (see below) require Browse Users permission so that they can add members to teams.
  • Many users might require Browse Users permission so that they can reassign issues to other users.
Tempo Administrators permission

Permission to:

  • Manage internal Issues
  • Open and close worklog periods
  • Test who can edit worklogs
  • Define the working week
  • Specify public holidays
  • By default, Jira Administrators receive Tempo Administrators permission.
  • Only Jira Administrators can do some other Tempo Timesheets administrative tasks.

Tempo Team Administrators permission

  • Permission to create, configure, browse, and delete teams and to manage team permissions
  • Browse Team permission (see below) for all teams
  • Tempo Team Administrators can grant themselves Approve Timesheet permission and Plan Time permission (see below).
  • Tempo Team Administrators permission is not sufficient for moving employees between different types of working week or sets of public holidays.
  • By default, Jira Administrators receive Tempo Team Administrators permission

Tempo Account Administrators permission

Permission to:

  • Create, configure, import, export, and delete accounts
  • Change the target revenue in account revenue reports
  • Only users with Approve Timesheet permission (see below) can approve accounts.
  • Only Jira Administrators can configure the following account settings:

    • Whether the account value is cleared when issues are moved between projects
    • An alternative name for the account field
    • Whether an account value is required or optional in a field configuration
  • By default, Jira Administrators receive Tempo Account Administrators permission

Tempo Rate Administrators permission

Permission to:

  • Set price rates for team roles in different teams
  • Change the target revenue on account revenue reports

Price rates are used for revenue reports and billing.

Tempo Timesheets Access

( only in versions since 8.15, not available in earlier versions)

Permission to:

  • Grant or deny access to specific groups in your organization.
  • Grant or deny access to external Jira users with permission to view your Jira issues.

All users in your organization are granted access by default. This permission can can be useful if there are users in your organization who may need to view tasks in Jira, but who are not required to log time.

This permission does not restrict developers from using the Tempo REST APIs according to their permissions.


Project permissions and roles


Permission or role

What you get by default


Notes

Who can give permission or role by default
Configuration location
Administer Projects permission

Within the context of a project, permission to edit:

  • Project role membership
  • Project components
  • Project versions
  • Some project details

Jira Administrators

Projects > View All Projects > project name > Project Administration > Permissions

 
Browse Projects permission

Within the context of a project, permission to:

  • Browse the project
  • Use the issue navigator
  • View individual issues

Work On Issues permission
  • Permission to access and use Tempo Timesheets
  • Within the context of a project, permission to log work on issues

Troubleshooting tips

  • Jira users cannot access or use Tempo Timesheets if they do not have Work On Issues permission for at least one Jira project.
  • Jira users cannot log work if Time tracking is turned OFF in Jira.
View All Worklogs permission

Within the context of a project, permission to view all worklogs

Troubleshooting tip

A possible reason why worklogs are not viewable is that users do not also have Browse Projects permission (see above).

Log Work for Others permissionWithin the context of a project, permission to log work on behalf of other Jira users who have permission to log work for the project
Tempo Project Managers roleSee notes >
  • This is a legacy role and might not be available in your Tempo Timesheets.
  • If this role is available, users in this role no longer automatically have permission to view all worklogs of a project. However, you might have granted users in this role other permissions, which are still valid.
  • Project Administrators
  • Jira Administrators
Projects > View All Projects > project name > Project Administration > Roles

Team permissions and roles


Permission or role

What you get by default

Notes
Who can give permission or role by default
Configuration location
Tempo Team Administrators permissionSee the 'Global permissions' table above.


Team Lead role
  • Browse Team permission (see below) for the team that you lead
  • Approve Timesheet permission (see below) for the team that you lead
  • Plan Time permission (see below) for the team that you lead
  • Permission to configure your team
  • Team Member role
The Team Lead role is not sufficient for moving employees between workload or holiday schemes or for changing the Team Lead.

Tempo Team Administrators

You can specify a Team Lead when you create a team:

Tempo > TEAMS more > Create New Team

or by configuring basic team information:

Tempo > TEAMS moreteam name > Configuration > Configure > Team Lead

Team Member role
  • Browse Team permission for your team (see below)
  • Permission to plan time for yourself to work on projects, versions, components, and issues
  • For you to be able to plan time for yourself to work on an issue, you must also have Browse Projects and 'Work on Issues' permission (see above) for the issue's project.
  • Team Leads (see above) are also Team Members.
  • Team Leads
  • Tempo Team Administrators

Tempo > TEAMS more > team name > Configuration > Members

Customized roles, such as Developer, Tester, or Scrum MasterSee notes >

By default, Team Members are given the role name Member. However, you can give customized role names, such as Developer, Tester, or Scrum Master, to Team Members.

When you customize role names, the permission that the Team Members have does not change.

  • Jira Administrators can create customized role names:
        
    Administration
    cogwheel > Add-ons > TEMPO TEAMS Tempo Roles
        
  • Team Leads and Tempo Team Administrators can assign role names to Team Members when they add or configure Team Members:
          
    Tempo > TEAMS more > team name > Configuration > Members
Browse Team permission

Permission to:

  • See the team's information, including the team utilization report
  • Select this team on forms that contain a Team field (for example, the Team field in an issue)

All Team Members automatically receive Browse Team permission for their own teams.

Tempo > TEAMS more > team name > Configuration > Permissions

Approve Timesheet permission
  • Permission to:
    • Review timesheets of Team Members.
    • Grant grace periods to Team Members to complete their timesheets after a scheduled closing date.
    • View the team timesheet and reports.
    • View Tempo team and account gadgets.
    • Approve accounts.
          
  • If the setting 'Configure timesheet approval process' is set to Monthly (Period) or Weekly, permission to:
        
    • Approve and reject timesheets of Team Members
    • View the approval logs of Team Members
          
  • Permission to set billed hours if the following check box is selected in Tempo Global Configuration: Users with Approve Timesheet Permission can set billed hours
  • Team Leads (see above) automatically receive Approve Timesheet permission for their own teams.
  • Tempo Team Administrators (see above) can grant themselves Approve Timesheet permission
  • To view other team members' worklogs on a timesheet, you must have View All Worklogs permission (see above) for the team's projects
Plan Time permission

Permission to plan time for team members to work on projects, versions, components, and issues.


  • Team Members can plan time for themselves without the Plan Time permission.
  • Team Leads (see above) automatically receive Plan Time permission for their own teams.
  • Tempo Team Administrators (see above) can grant themselves Plan Time permission
  • Plan Time permission works in Tempo Timesheets only if the following check box is selected in Tempo Global Configuration:
    'Users with Plan Time permission for a team can plan time for team members in Tempo Timesheets.'
  • For you to be able to plan time on an issue, the following permissions must also be granted:
    • You and the user that you are planning time for must have Browse Projects permission (see above) for the issue's project
    • The user that you are planning time for must have 'Work on Issues' permission (see above) for the issue's project

Customer and account permissions and roles


Permission or role

What you get by default

Notes
Who can give permission or role by default
Configuration location
Tempo Account Administrators permissionSee the 'Global permissions' table above.


Tempo Rate Administrators permissionSee the 'Global permissions' table above.


Account Lead role
  • Responsibility for the account
  • Browse Customer Revenue permission (see below) if you are a user of Jira and Tempo Timesheets
Account Leads are not required to be users of Jira and Tempo Timesheets.
  • Tempo Account Administrators
  • Jira Administrators

You can specify an Account Lead when you create an account:

Tempo > ACCOUNTS more > Create Account

or by configuring basic account information:

Tempo > ACCOUNTS more > account name > Configuration > General > Lead

Browse Customer Revenue permission

Permission to view the account revenue report and the time and expenses report for accounts that are associated with a customer.

Account Leads automatically receive Browse Customer Revenue permission for all customers.

Tempo > ACCOUNTS more > Manage > Customers > View Customer > Configuration

Related topics