Access permissions control what each role can see and do. There are four built-in levels — Administrator, Manager, User, and Restricted — and you can fine-tune what each level is allowed to do.

  1. Open Settings > Access.
  2. You see the four levels listed with their current capabilities.
  3. Click Edit on the level you want to customise.
  4. Toggle the individual capabilities, grouped into areas such as:
  • Clients — view, create, edit, delete clients; use import/export.
  • Financial data — view financial figures, edit invoicing, manage estimates and credit notes.
  • Workflows — visibility (all / assigned only), bulk operations, billing.
  • Time entries — log time, edit others' entries, approve timesheets.
  • Leaves — request leave, approve others' leave.
  • Settings — edit organisation settings, manage users.
  1. Click Save.

The new defaults apply immediately to every team member at that access level.

Tip: Capabilities you remove from a level can still be granted to specific individuals — open Settings > Users, click a teammate, and adjust their custom permission overrides to make exceptions without affecting everyone else at that level.

Note: The Administrator level cannot be downgraded — at least one administrator must always exist to manage settings and billing.