Access and permissions
Which permission each Projects screen needs, who may see and change what, and the rules that keep people from approving their own work.
On this page (28)
Permissions by screenAll ProjectsCreate ProjectProject 360All Projects / Project 360Budget / EstimationTimesheetsExpensesSubcontractsProject P&LProcurementBudgetEstimationBOQBillingChangesCostsBaselinesResource PlanningProject SettingsReportsClosed projectCompany isolationFeaturesEdit ProjectAuditDocumentsRoles
Permissions by screen
| Screen | Menu | Permission needed |
|---|---|---|
| All Projects (portfolio) | Projects > Projects > All Projects | project.view (list); project.create (create, duplicate, import); project.edit (status, archive) |
| My Projects | Projects > Projects > My Projects | project.view |
| Favourite / Archived Projects | All Projects > title menu > Favourites / Archived | project.view; archive/restore project.edit |
| Portfolio calendar | All Projects > Calendar view | project.view |
| Project Portfolio | Projects > Projects > Project Portfolio | project.view; Budget / Forecast cost need project.cost.view, Forecast profit needs project.margin.view |
| Create Project dialog | All Projects > Create Project | project.create |
| Import projects dialog | All Projects > Import | project.create |
| Project 360 | All Projects > open a project | project.view; cost figures project.cost.view; margin/profit project.margin.view |
| Overview tab | Project 360 > Overview | project.view; Add Team Member / Note need project.edit |
| Edit Project dialog | Project 360 > Edit Project | project.edit |
| Project close checklist | Project 360 > Actions > Close checklist | project.view to read; project.close to save |
| Add Team Member and Add to activity dialogs | Project 360 > Overview > Add Team Member / Note | project.edit |
| Tasks > Phases / WBS | Projects > Planning > WBS / Phases (choose a project) | project.task.view; changes project.task.edit |
| Tasks (list and Kanban) | Projects > Planning > Tasks; Project 360 > Tasks | project.task.view; changes project.task.edit |
| Task dialog | Tasks > New Task / open a task | project.task.edit |
| Gantt schedule | Projects > Planning > Gantt Schedule (choose a project); Project 360 > Gantt | project.task.view; links / save baseline project.task.edit; approve project.budget.approve |
| Milestones | Projects > Planning > Milestones (choose a project); Tasks > Milestones | project.view; changes project.task.edit |
| Daily progress | Projects > Execution > Daily Progress (choose a project); Tasks > Daily progress | project.task.view; Record project.task.edit |
| Project Types | Configuration > Project Types | project.configure (server); menu shows for project.view |
| Project Templates | Configuration > Project Templates; Projects > Project Templates | project.configure |
| Feature Profiles | Configuration > Feature Profiles | project.configure |
| Cost Codes | Configuration > Cost Codes | project.configure |
| Lookup lists (8 menus) | Configuration > Billing Methods / Project Statuses / Milestone Types / Resource Types / Document Types / Expense Types / Risk Categories / Commercial Tags | project.configure |
| Approval Rules | Configuration > Approval Rules | project.configure |
| Resources | Configuration > Resources | list project.view; changes project.configure |
| Estimation Library | Configuration > Estimation Library | project.configure |
| Assemblies | Configuration > Assemblies | project.configure |
| Project Settings | Configuration > Project Settings (also the cog on All Projects) | view project.view; Save project.configure |
| Project Management features | Administration > Applications > Project Management > Features | company administrator |
| Project Management fields | Administration > Applications > Project Management > Fields | company administrator |
| Budget | Projects > Planning > Budget (choose a project); Project 360 > Budget | project.budget.view; prepare project.budget.edit; approve / freeze project.budget.approve |
| Estimation | Projects > Planning > Estimation (choose a project); Budget > Estimation | project.budget.view; edit project.budget.edit; approve project.budget.approve |
| Bill of quantities | Projects > Planning > BOQ (choose a project); Project 360 > BOQ | project.boq.view; edit project.boq.edit; approve project.budget.approve; switch 'Bill of quantities' |
| AI BOQ import - preview | BOQ > AI BOQ import | project.boq.edit |
| Resource Planning (portfolio heatmap) | Projects > Planning > Resource Planning | project.resource.view |
| Resources tab | Project 360 > Resources | project.resource.view; changes project.edit |
| Timesheets | Projects > Execution > Timesheets; Project 360 > Costs > Timesheets | project.view; log project.task.edit; approve project.resource.assign |
| Log Time dialog | Costs > Timesheets > Log Time | project.task.edit |
| Expenses | Projects > Execution > Expenses; Project 360 > Costs > Expenses | project.view; add project.task.edit; approve project.budget.approve |
| Cost summary | Project 360 > Costs > Cost summary | project.cost.view (to read); post project.budget.edit |
| Forecast | Project 360 > Costs > Forecast | project.cost.view; save project.budget.edit |
| Project P&L and revenue recognition | Project 360 > Costs > Project P&L | project.margin.view (P&L, recognition); post project.billing.create; switch 'Project revenue recognition' |
| Earned value | Project 360 > Costs > Earned value | project.cost.view |
| Cash flow | Project 360 > Costs > Cash flow | project.cost.view |
| Procurement | Projects > Commercial > Procurement; Project 360 > Procurement | project.view; changes project.edit; approve project.budget.approve; switch 'Project procurement' |
| Purchase request dialog | Procurement > Purchase request | project.edit |
| Purchase Requests (all projects) | Projects > Commercial > Purchase Requests | project.view |
| Commitments (all projects) | Projects > Commercial > Commitments | project.view; switch 'Project procurement' |
| Subcontracts | Projects > Commercial > Subcontracts; Procurement > Subcontracts | project.view; changes project.edit; certify project.budget.approve; switch 'Subcontracts and claims' |
| Material plan | Procurement > Material plan | project.view; changes project.edit |
All Projects
| Rule | What the system does |
|---|---|
| View permission | Projects app refused 'You do not have permission for this action.' |
| Company isolation | Not found ('Record not found.'); A's customers, templates and dimension values refused on B ('Choose one from this company.') |
Create Project
| Rule | What the system does |
|---|---|
| Create needs project.create | Refused 'You do not have permission for this action.' |
Project 360
| Rule | What the system does |
|---|---|
| Closing needs project.close | Both refused 'You do not have permission for this action.' |
| Team member sees only what the role gives | Tasks, BOQ (selling side), Resources and Changes (no cost) open; Budget, Costs, Billing, Procurement figures refused or dashed |
All Projects / Project 360
| Rule | What the system does |
|---|---|
| Cost and margin hidden | Profit Margin, Approved Budget, Actual / Committed / Forecast Cost show '—'; task budget cost and actual cost absent; Portfolio budget / forecast / profit columns empty |
Budget / Estimation
| Rule | What the system does |
|---|---|
| Budget figures need budget and cost rights | Budget tab refused 'You do not have permission for this action.' (no project.budget.view); Costs summary and Forecast refused (no project.cost.view); timesheet cost column shows '—' |
Timesheets
| Rule | What the system does |
|---|---|
| Approving time needs project.resource.assign | Refused 'You do not have permission for this action.' |
| Nobody approves their own time | Refused 'Somebody else approves your time.' in both cases; status stays Submitted |
| Time and expense lock after submit | 'Submitted time is changed by its approver only.' / 'A submitted expense is changed by its approver only.'; editable again after Reject -> Back to draft |
Expenses
| Rule | What the system does |
|---|---|
| Approving expenses needs project.budget.approve | Refused 'You do not have permission for this action.' |
| Nobody approves their own expense | Refused 'Somebody else approves your expense.' |
Subcontracts
| Rule | What the system does |
|---|---|
| Certification needs project.budget.approve | Refused 'You do not have permission for this action.' |
| Claim over the verified amount refused | Refused 'Cannot certify more than was verified.'; certify needs project.budget.approve (editor with project.edit only refused) |
| Only active subcontracts take claims | Refused 'Activate the subcontract before claims.' |
Project P&L
| Rule | What the system does |
|---|---|
| Margin view | Both refused 'You do not have permission for this action.'; Project 360 Profit Margin shows '—' |
Procurement
| Rule | What the system does |
|---|---|
| Closed project is read-only | Each refused 'A closed or cancelled project is read-only. Reopen it through an authorised correction first.' |
| Requester cannot approve their own purchase request | Refused 'Somebody other than who asked must decide it.'; approval also needs project.budget.approve |
| Ordering needs an approved request and project.edit | 'Only an approved request can be ordered.' / 'You do not have permission for this action.' |
Budget
| Rule | What the system does |
|---|---|
| Maker cannot approve their own budget | Refused 'Somebody other than who submitted it must approve it.'; the version stays Submitted |
| Approve and freeze need project.budget.approve | Each refused 'You do not have permission for this action.' |
| Approved and frozen versions are locked | Refused 'Only a draft budget can be edited; revise the approved one instead.' |
| Budget change needs a second person | PM-A: 'Somebody other than who asked for it must decide it.'; editor only: 'You do not have permission for this action.' |
Estimation
| Rule | What the system does |
|---|---|
| Estimate edit versus approve | View only: all refused; editor: Approve refused 'You do not have permission for this action.'; a Submitted estimate cannot be edited 'Only a draft estimate can be edited; make a new revision.' |
BOQ
| Rule | What the system does |
|---|---|
| BOQ edit versus approve and locked once approved | Approve refused without project.budget.approve; Approved BOQ lines refused 'An approved BOQ is never edited; make a revised version.' |
| Cost rate and margin hidden without rights | Cost rate, Estimated cost and Margin KPI are not shown; selling Rate, Amount, Certified and Progress are |
Billing
| Rule | What the system does |
|---|---|
| Billing tab needs billing.view, actions need billing.create | Billing tab refused 'You do not have permission for this action.'; view-only user: every action refused |
| No double invoicing and no edit of invoiced steps | 'This billing step is already invoiced.'; 'An invoiced billing step is history; it is not changed.'; 'An invoiced billing step cannot be deleted.' |
| A claim needs a named certifier when the raiser certifies | Refused 'Record who certified it (the customer's representative).' |
| One open application at a time and progress never goes back | 'Finish the open application first.'; 'Progress cannot go back from the last certified claim.'; 'Progress is 0 to 100.' for 101 |
| Invoice needs a customer | Refused 'The project needs a customer to invoice.' (the tab also tells the user to set one on Edit Project) |
Changes
| Rule | What the system does |
|---|---|
| Approving a change needs project.change.approve | Refused 'You do not have permission for this action.' |
| Raiser cannot approve own change | Refused 'Somebody other than who raised the change must decide it.' |
| Locked once under customer review; no skipping steps | 'A change under customer review or approved is not edited; raise another change.'; 'A change in Potential Change cannot move to Approved.' |
| Change list needs change.view | Refused 'You do not have permission for this action.'; cost impact and margin are dashes without cost / margin view |
Costs
| Rule | What the system does |
|---|---|
| Posting and forecast need budget.edit; recognition needs billing.create | Each refused 'You do not have permission for this action.' |
Baselines
| Rule | What the system does |
|---|---|
| Baseline approval needs project.budget.approve | Save allowed; approve refused 'You do not have permission for this action.' |
Resource Planning
| Rule | What the system does |
|---|---|
| Resource views and assignment rights | Page refused; assignment refused 'You do not have permission for this action.' |
Project Settings
| Rule | What the system does |
|---|---|
| Settings and configuration need project.configure | Reading works; every save and the scan refused 'You do not have permission for this action.' - grant project.configure to the tester's role to configure |
Reports
| Rule | What the system does |
|---|---|
| Reports need project.report.view and drop cost / margin columns | Member refused; viewer sees a narrower report: budget, cost and profit columns removed, not shown as empty |
Closed project
| Rule | What the system does |
|---|---|
| Billing, claims, changes and subcontract claims also read-only when closed | Each refused 'A closed or cancelled project is read-only. Reopen it through an authorised correction first.' |
Company isolation
| Rule | What the system does |
|---|---|
| Other company's files and photos | Not found; nothing returned |
Features
| Rule | What the system does |
|---|---|
| Turned-off capability refuses writes, keeps reads | POST refused 'capability_disabled' (409); GET still works; the menu entry disappears |
Edit Project
| Rule | What the system does |
|---|---|
| Edit conflict | B refused 'Somebody else changed this project. Reload it and try again.' |
Audit
| Rule | What the system does |
|---|---|
| Key decisions are in the audit trail | Events project.budget.approve, project.claim.certified, project.change.approved, project.status with the actor and project code |
Documents
| Rule | What the system does |
|---|---|
| Upload size and download right | 'Files must be 20 MB or smaller.'; download needs project.view (attachment, original file name) |
Roles
| Rule | What the system does |
|---|---|
| Sensitive permissions are flagged | Both marked sensitive (second-person assignment applies); the Project member role holds neither, nor any cost, margin, billing or budget right |