Permissions Overview for Cloud

Our Cloud Help Center has a new home at https://help.tempo.io/cloud/

We will no longer be updating Cloud documentation in this space, so please be sure to check the new site for the latest documentation and learning content.

The tables below list the following types of permissions and roles:

  • Some important Jira permissions that Tempo Timesheets relies upon.
  • Tempo administrative and user permissions.
  • Tempo roles, such as Team Lead and Account Lead, which already include certain permissions.

On this page:


Global Permissions

See Global Permissions for more information about accessing and using these types of permissions.


Global PermissionDescriptionWho should have this permission?Useful information
Tempo Timesheets Access

Grant or deny access to Tempo Timesheets to specific groups in your organization, or to external Jira users with permission to view your Jira issues.

All Jira users in your organization are granted access by default.

Any Jira user in your organization who needs to use Tempo Timesheets.


You can use this permission to restrict access to only those who need to use Tempo TImesheets by modifying the membership in the appropriate Jira groups.

This permission does not restrict developers from using the Tempo REST APIs according to their permissions.

Tempo Planner Access

Grant or deny access to Tempo Planner to specific groups in your organization, or to external Jira users with permission to view your Jira issues.

All Jira users in your organization are granted access by default.

Any Jira user in your organization who needs to use Tempo Planner.

You can use this permission to restrict access to only those who need to use Tempo Planner by modifying the membership in the appropriate Jira groups.


Tempo Cost Tracker AccessGrant specific groups in your organization or external Jira users with the required permissions access to Tempo Cost Tracker. Only Jira administrators are granted access by default. Any Jira user in your organization who needs to use Tempo Cost Tracker, such as project managers who want to track the costs of their projects and others who need to see this data.Granting access to Tempo Cost Tracker allows them to view all worklogs from Tempo Timesheets. Make sure that the people you add have the correct authorization in accordance with your organization's privacy policy.
Browse users and groupsPermission to view lists of Jira user names and group names, and to select users or groups from the lists.Many users might require this permission, for example:
  • Tempo Team Administrators (see below) require Browse Users permission so that they can add members to teams.
  • Those who require Browse Users permission to be able to reassign issues to other users.
  • The “atlassian-addons-admin” group needs to have this permission. 

This permission gives users access to select other users in dropdowns, for example when assigning issues in Jira or adding members to teams. 

This permission gives add-ons, like Tempo, access to check on user and group permissions in the system (via the “atlassian-addons-admin” group). Without this permission, add-ons  permission checks might fail.

Tempo AdministratorsPermission to manage internal issues, open and close worklog periods, test who can edit worklogs, configure the working week, and specify public holidays.

Any manager or administrator who needs to manage all Tempo apps for their organization.

By default, Jira Administrators are in a Jira group that has the Tempo Administrators permission.

Some Tempo Timesheets administrative tasks require Jira Administrators permission.

Tempo Account Administrators

Permission to:

  • Create, configure, and delete accounts
  • Create account categories
  • Import/export data to accounts
  • Change the account status
  • Link accounts to Jira projects
  • Create and edit customers 


Any project or financial manager who needs to work with client and financial data, such as billing for invoices or tracking Capex/Opex for accounting purposes.
  • By default, Jira Administrators are in a Jira group that has the Tempo Account Administrators permission.
  • Only users with Approve Timesheet permission (see Team Permissions) can approve accounts.
  • Some account configuration tasks require Jira Administrators permission, such as configuring these account settings:
    • Whether the account value is cleared when issues are moved between projects.
    • An alternative name for the account field.
    • Whether an account value is required or optional in a field configuration.
Tempo Team Administrator
  • Permission to create, configure, and delete teams, to manage team permissions, and to browse teams. 
  • Permission to assign Team Leads per team.
  • Permission to create, configure, and delete programs (groups of teams) and iterations for programs.
  • Permission to plan time for teams and team members.
Any department or HR manager, project or team lead, or resource manager who needs to manage the teams at an organization level. 
  • By default, Jira Administrators are in a Jira group that has the Tempo Team Administrators permission.
  • Tempo Team Administrators can grant themselves Approve Timesheet permission and Plan Time permission (see Team Permissions).
  • Tempo Team Administrators permission is not sufficient for moving employees between different types of working week or sets of public holidays.

Project Permissions

See Project Permissions for more information about accessing and using these types of permissions.


Project PermissionDescriptionWho should have this permission?Useful information
Administer ProjectsPermission to edit:
  • Project role membership
  • Project components
  • Project versions
  • Some project details
Jira and Tempo administrators, project managersThis is a Jira permission that's useful for Tempo administration.
Browse ProjectsPermission to:
  • Browse the Jira project
  • Use the issue navigator
  • View individual issues

All Tempo users who work on Jira projects and issues.

You need this permission for the project containing the worklogs to be able to view them.

This is a basic Jira permission that all Jira users need for the projects on which they're working.

The project role atlassian-addons-project-access must be granted permissions to a project in order for Tempo Timesheets to function properly.

See the Atlassian Jira documentation for more information.

Work on Issues
  • Permission to access and use Tempo Timesheets
  • Permission to log time on Jira issues
All Tempo users who need to log their time to Jira issues using Tempo Timesheets.

Jira users cannot access or use Tempo Timesheets if they do not have Work on Issues permission for at least one Jira project.

Delete All WorklogsPermission to delete all worklogs made on issues in this Jira project.Team leads and managers, project managers.
Delete Own WorklogsPermission to delete your own worklogs made on issues in this Jira project.All Tempo users who log their time.
Edit All WorklogsPermission to edit all worklogs made on issues in this Jira project.Team leads and managers, project managers.
Edit Own WorklogsPermission to edit your own worklogs made on issues in this Jira project.All Tempo users who log their time.
Log Work for OthersPermission to log work on behalf of other Jira users who have permission to log time for this Jira project.Team leads and managers, project managers.This permission is added when you install Tempo Timesheets.
Set Billable HoursPermission to set billable hours in worklogs for this Jira project.Tempo users who are billing their hours for invoicing clients.

This permission is added when you install Tempo Timesheets.

When you're invoicing your customers or clients, you need to be able to enter your billable hours separately from your worked hours.

The Set Billable Hours permission makes the Billable field available in the Log Time form for those who need to enter billable hours. 

View All Worklogs

Permission to view all worklogs made by others on issues within a Jira project for which they have the Browse Projects permission.


Team leads and managers, HR, project managers.

This permission is added when you install Tempo Timesheets.

If you have this permission and still can't view all worklogs, it may be because you don't have Browse Projects permission for this project (see above), which you need.

View Issue HoursPermission to access the total number of hours per issues in this Jira project, but not to see the individual worklogs of users.Managers who need worklog data to run reports on logged time for the company, but are not allowed to see the individual worklogs.This permission is added when you install Tempo Timesheets.

Team Permissions and Roles

See Team Permissions for more information about accessing and using these types of permissions.


Permission/RoleDescriptionWho should have this permission?Notes
Tempo Team Administrator
  • Permission to create, configure, and delete teams, manage team and user permissions, and browse teams. 
  • Permission to create, configure, and delete programs (groups of teams) and iterations for programs, and to plan time for teams and team members.

Managers, administrators, HR

This is a Tempo global permission - see Global Permissions above for more information.
Team Lead role
  • Browse Team permission (see below) for the team that you lead.
  • Approve Timesheet permission (see below) for the team that you lead.
  • Plan Time permission (see below) for the team that you lead.
  • Permission to configure your team.
  • Team Member role.

Department or team managers, project team leads

Tempo Team administrators can assign a Team Lead when they create a team, or edit the Team Lead role later on.

The Team Lead role is not sufficient for moving employees between workload or holiday schemes or for changing the Team Lead.

View WorklogsPermission to view worklogs for respective teams and/or users.Team leads, managers, administrators, HR

This permission is available only when Tempo Timesheets is installed.

Manage Worklogs

Permission to create, edit, and delete worklogs for respective teams and/or users

Users with the Manage Team Plans permission can create, edit, and delete team plans for members of the selected team.


Team leads, managers, administrators, HR

This permission is available only when Tempo Timesheets is installed.

Users with this permission can make changes to worklogs in user timesheets after the scheduler has closed the timesheet period.

Approve TimesheetsPermission to review and approve or reject user timesheets for respective teams and/or its members.Team leads, managers, administrators, HR

This permission is available only when Tempo Timesheets is installed.

When you select the Approve Timesheets permission, the View Worklogs permission is also automatically selected so you can view the timesheets you're approving!

View Plans

Permission to view all plans for members of the respective team. 


  • Tempo Planner users, such as other team members
  • Team leads, managers, administrators, HR
This permission is available only when Tempo Planner is installed.
Manage Plans

Permission to create, edit, and delete plans for the respective team and/or its members.

Team leads, resource or departments managersThis permission is available only when Tempo Planner is installed.
Approve Plans

Permission to review and approve or reject plans for respective teams and/or its members.


Team leads, resource or departments managers

This permission is available only when Tempo Planner is installed.

If Enable Plan Approval is off in Tempo Settings, the Approve Plans permission is not available.

When you select the Approve Plans permission, the View Plans permission is also automatically selected so you can view the plans you're approving!

Manage Team

Permission to add members to the team, edit team settings, grant team permissions, and create permission roles for the respective team. 

Team leads, team administrators, HRUsers with this permission can make changes to worklogs in user timesheets after the scheduler has closed the timesheet period.
View TeamPermission to view a team and its members. All Tempo users who have access to this team.This permission is always granted to all permission roles for the respective team.

Account Permissions and Roles

See Managing Accounts for more information about setting up and using accounts.


Permission/RoleDescriptionWho should have this permission?Notes
Tempo Account Administrators permission

Permission to:

  • Create, configure, and delete accounts
  • Create account categories
  • Import/export data to accounts
  • Change the account status
  • Link accounts to Jira projects
  • Create and edit customers 
Any project or financial manager who needs to work with client and financial data, such as billing for invoices or tracking Capex/Opex for accounting purposes.This is a Tempo global permission - see Global Permissions above for more information.
Account Lead role
  • Responsibility for the account
  • Can edit the account
  • Change the account status

Any account manager or financial manager who is responsible for the account data.

You can assign an Account Lead when you create an account, or by editing the People Involved > Lead field in the account information.