Roles and Permissions

Everyone in a workspace has a role. The role decides what they can see and do.

Role	Who it’s for
Owner	The person who owns the workspace and pays for it. Can do everything.
Admin	Someone who helps run the workspace. Can do almost everything by default.
Member	Someone who does the day-to-day work, like tracking time on Tasks.

What Each Role Can Do by Default

Permission	Admin	Member
Create and edit Projects, Clients and Tasks	Yes	Yes
Delete Projects, Clients and Tasks	Yes	No
Track time	Yes	Yes
Create estimates	Yes	Yes
Send estimates	Yes	No
Create and send Invoices	Yes	No
View reports	Yes	No
Manage services, contracts and email templates	Yes	No
Manage business info	Yes	No
Manage payments	No	No
See their own billable rate	Yes	Yes
See budgets, team rates, Invoice amounts and financial reports	Yes	No
Submit expenses	Yes	Yes
See, approve and manage everyone’s expenses	Yes	No

The Owner has every permission, always.

Change What a Role Can Do

Go to Settings › Owner Settings.
Open the Role Permissions tab.
Find the permission. They’re grouped into sections like Projects, Invoicing, Tasks & Time and Financial Data.
Turn it on or off in the Admin or Member column.

Changes save and take effect right away, for everyone with that role.

The Owner column is locked. Owners always have full access.

Financial Data

The permissions under Financial Data decide who sees money in the workspace: budgets, rates, Invoice and estimate amounts, and financial reports. When someone can’t see financial data, hrglass hides those numbers from them across the app.

You can also make exceptions for one person, without changing their whole role. See Who Can See Financial Data.