Permissions Overview for Cloud

Grant or deny access to Tempo Timesheets to specific groups in your organization, or to external Jira users with permission to view your Jira issues.

All Jira users in your organization are granted access by default.

Any Jira user in your organization who needs to use Tempo Timesheets.

You can use this permission to restrict access to only those who need to use Tempo TImesheets by modifying the membership in the appropriate Jira groups.

This permission does not restrict developers from using the Tempo REST APIs according to their permissions.

Grant or deny access to Tempo Planner to specific groups in your organization, or to external Jira users with permission to view your Jira issues.

All Jira users in your organization are granted access by default.

You can use this permission to restrict access to only those who need to use Tempo Planner by modifying the membership in the appropriate Jira groups.

• Tempo Team Administrators (see below) require Browse Users permission so that they can add members to teams.
• Those who require Browse Users permission to be able to reassign issues to other users.
• The “atlassian-addons-admin” group needs to have this permission. 

This permission gives users access to select other users in dropdowns, for example when assigning issues in Jira or adding members to teams. 

This permission gives add-ons, like Tempo, access to check on user and group permissions in the system (via the “atlassian-addons-admin” group). Without this permission, add-ons  permission checks might fail.

Any manager or administrator who needs to manage all Tempo apps for their organization.

By default, Jira Administrators are in a Jira group that has the Tempo Administrators permission.

Some Tempo Timesheets administrative tasks require Jira Administrators permission.

Permission to:

• Create, configure, and delete accounts
• Create account categories
• Import/export data to accounts
• Change the account status
• Link accounts to Jira projects
• Create and edit customers 

• By default, Jira Administrators are in a Jira group that has the Tempo Account Administrators permission.
• Only users with Approve Timesheet permission (see Team Permissions) can approve accounts.
• Some account configuration tasks require Jira Administrators permission, such as configuring these account settings:
  • Whether the account value is cleared when issues are moved between projects.
  • An alternative name for the account field.
  • Whether an account value is required or optional in a field configuration.

• Permission to create, configure, and delete teams, to manage team permissions, and to browse teams. 
• Permission to assign Team Leads per team.
• Permission to create, configure, and delete programs (groups of teams) and iterations for programs.
• Permission to plan time for teams and team members.

• By default, Jira Administrators are in a Jira group that has the Tempo Team Administrators permission.
• Tempo Team Administrators can grant themselves Approve Timesheet permission and Plan Time permission (see Team Permissions).
• Tempo Team Administrators permission is not sufficient for moving employees between different types of working week or sets of public holidays.

• Project role membership
• Project components
• Project versions
• Some project details

• Browse the Jira project
• Use the issue navigator
• View individual issues

All Tempo users who work on Jira projects and issues.

You need this permission for the project containing the worklogs to be able to view them.

This is a basic Jira permission that all Jira users need for the projects on which they're working.

The project role atlassian-addons-project-access must be granted permissions to a project in order for Tempo Timesheets to function properly.

See the Atlassian Jira documentation for more information.

• Permission to access and use Tempo Timesheets
• Permission to log time on Jira issues

Jira users cannot access or use Tempo Timesheets if they do not have Work on Issues permission for at least one Jira project.

This permission is added when you install Tempo Timesheets.

When you're invoicing your customers or clients, you need to be able to enter your billable hours separately from your worked hours.

The Set Billable Hours permission makes the Billable field available in the Log Time form for those who need to enter billable hours. 

Permission to view all worklogs made by others on issues within a Jira project for which they have the Browse Projects permission.

Team leads and managers, HR, project managers.

This permission is added when you install Tempo Timesheets.

If you have this permission and still can't view all worklogs, it may be because you don't have Browse Projects permission for this project (see above), which you need.

• Permission to create, configure, and delete teams, manage team and user permissions, and browse teams. 
• Permission to create, configure, and delete programs (groups of teams) and iterations for programs, and to plan time for teams and team members.

Managers, administrators, HR

• Browse Team permission (see below) for the team that you lead.
• Approve Timesheet permission (see below) for the team that you lead.
• Plan Time permission (see below) for the team that you lead.
• Permission to configure your team.
• Team Member role.

Department or team managers, project team leads

Permission to create, edit, and delete worklogs for respective teams and/or users. 

Users with the Manage Team Plans permission can create, edit, and delete team plans for members of the selected team.

Team leads, managers, administrators, HR

This permission is available only when Tempo Timesheets is installed.

Users with this permission can make changes to worklogs in user timesheets after the scheduler has closed the timesheet period.

This permission is available only when Tempo Timesheets is installed.

When you select the Approve Timesheets permission, the View Worklogs permission is also automatically selected so you can view the timesheets you're approving!

Permission to view all plans for members of the respective team. 

• Tempo Planner users, such as other team members
• Team leads, managers, administrators, HR

Permission to create, edit, and delete plans for the respective team and/or its members.

Permission to review and approve or reject plans for respective teams and/or its members.

This permission is available only when Tempo Planner is installed.

If Enable Plan Approval is off in Tempo Settings, the Approve Plans permission is not available.

When you select the Approve Plans permission, the View Plans permission is also automatically selected so you can view the plans you're approving!

Permission to add members to the team, edit team settings, grant team permissions, and create permission roles for the respective team. 

Permission to:

• Create, configure, and delete accounts
• Create account categories
• Import/export data to accounts
• Change the account status
• Link accounts to Jira projects
• Create and edit customers 

• Responsibility for the account
• Can edit the account
• Change the account status

Any account manager or financial manager who is responsible for the account data.