Roles determine what parts of the system users can access. There are seven roles that come out of the box, which can all be modified except for the Company Admin role. Modifying or creating a new role is a way to give users specific access to the system. Users can have multiple roles, and the access provided is additive, meaning adding a role will not take away access to a record.

Users with this role can create, read, update, and delete almost any record in the system. Each organization must have at least one user with the Company Admin role.

Users with this role can only enter time to their own timesheet. This role is given to new users by default.

Users with this role can create, read, update, and delete anything on the work hierarchy (Client, Project, Tasks). They can also view department, title, user, rate card, and rates records.

Users with this role can view anything on the work hierarchy and the user hierarchy. They can also create, read, update, and delete rate cards and rates.

Users with this role have access to create, read, update, and delete anything on the user hierarchy, as well as holidays. They also have access to view fields like start and end date on the user record.

This role has access to create a timesheet for any user and modify any time for any user. They also have access to delete any timesheet.

This role gives users access to run the pivot report.

The above roles can be reset. If you happened to make a change that doesn't work like you expected you can go to one of these roles and click the "Reset Role" link on the bottom left of the form and it will restore it to its default settings.