Access and permissions

Which permission each Projects screen needs, who may see and change what, and the rules that keep people from approving their own work.

On this page (28)

Permissions by screen

ScreenMenuPermission needed
All Projects (portfolio)Projects > Projects > All Projectsproject.view (list); project.create (create, duplicate, import); project.edit (status, archive)
My ProjectsProjects > Projects > My Projectsproject.view
Favourite / Archived ProjectsAll Projects > title menu > Favourites / Archivedproject.view; archive/restore project.edit
Portfolio calendarAll Projects > Calendar viewproject.view
Project PortfolioProjects > Projects > Project Portfolioproject.view; Budget / Forecast cost need project.cost.view, Forecast profit needs project.margin.view
Create Project dialogAll Projects > Create Projectproject.create
Import projects dialogAll Projects > Importproject.create
Project 360All Projects > open a projectproject.view; cost figures project.cost.view; margin/profit project.margin.view
Overview tabProject 360 > Overviewproject.view; Add Team Member / Note need project.edit
Edit Project dialogProject 360 > Edit Projectproject.edit
Project close checklistProject 360 > Actions > Close checklistproject.view to read; project.close to save
Add Team Member and Add to activity dialogsProject 360 > Overview > Add Team Member / Noteproject.edit
Tasks > Phases / WBSProjects > Planning > WBS / Phases (choose a project)project.task.view; changes project.task.edit
Tasks (list and Kanban)Projects > Planning > Tasks; Project 360 > Tasksproject.task.view; changes project.task.edit
Task dialogTasks > New Task / open a taskproject.task.edit
Gantt scheduleProjects > Planning > Gantt Schedule (choose a project); Project 360 > Ganttproject.task.view; links / save baseline project.task.edit; approve project.budget.approve
MilestonesProjects > Planning > Milestones (choose a project); Tasks > Milestonesproject.view; changes project.task.edit
Daily progressProjects > Execution > Daily Progress (choose a project); Tasks > Daily progressproject.task.view; Record project.task.edit
Project TypesConfiguration > Project Typesproject.configure (server); menu shows for project.view
Project TemplatesConfiguration > Project Templates; Projects > Project Templatesproject.configure
Feature ProfilesConfiguration > Feature Profilesproject.configure
Cost CodesConfiguration > Cost Codesproject.configure
Lookup lists (8 menus)Configuration > Billing Methods / Project Statuses / Milestone Types / Resource Types / Document Types / Expense Types / Risk Categories / Commercial Tagsproject.configure
Approval RulesConfiguration > Approval Rulesproject.configure
ResourcesConfiguration > Resourceslist project.view; changes project.configure
Estimation LibraryConfiguration > Estimation Libraryproject.configure
AssembliesConfiguration > Assembliesproject.configure
Project SettingsConfiguration > Project Settings (also the cog on All Projects)view project.view; Save project.configure
Project Management featuresAdministration > Applications > Project Management > Featurescompany administrator
Project Management fieldsAdministration > Applications > Project Management > Fieldscompany administrator
BudgetProjects > Planning > Budget (choose a project); Project 360 > Budgetproject.budget.view; prepare project.budget.edit; approve / freeze project.budget.approve
EstimationProjects > Planning > Estimation (choose a project); Budget > Estimationproject.budget.view; edit project.budget.edit; approve project.budget.approve
Bill of quantitiesProjects > Planning > BOQ (choose a project); Project 360 > BOQproject.boq.view; edit project.boq.edit; approve project.budget.approve; switch 'Bill of quantities'
AI BOQ import - previewBOQ > AI BOQ importproject.boq.edit
Resource Planning (portfolio heatmap)Projects > Planning > Resource Planningproject.resource.view
Resources tabProject 360 > Resourcesproject.resource.view; changes project.edit
TimesheetsProjects > Execution > Timesheets; Project 360 > Costs > Timesheetsproject.view; log project.task.edit; approve project.resource.assign
Log Time dialogCosts > Timesheets > Log Timeproject.task.edit
ExpensesProjects > Execution > Expenses; Project 360 > Costs > Expensesproject.view; add project.task.edit; approve project.budget.approve
Cost summaryProject 360 > Costs > Cost summaryproject.cost.view (to read); post project.budget.edit
ForecastProject 360 > Costs > Forecastproject.cost.view; save project.budget.edit
Project P&L and revenue recognitionProject 360 > Costs > Project P&Lproject.margin.view (P&L, recognition); post project.billing.create; switch 'Project revenue recognition'
Earned valueProject 360 > Costs > Earned valueproject.cost.view
Cash flowProject 360 > Costs > Cash flowproject.cost.view
ProcurementProjects > Commercial > Procurement; Project 360 > Procurementproject.view; changes project.edit; approve project.budget.approve; switch 'Project procurement'
Purchase request dialogProcurement > Purchase requestproject.edit
Purchase Requests (all projects)Projects > Commercial > Purchase Requestsproject.view
Commitments (all projects)Projects > Commercial > Commitmentsproject.view; switch 'Project procurement'
SubcontractsProjects > Commercial > Subcontracts; Procurement > Subcontractsproject.view; changes project.edit; certify project.budget.approve; switch 'Subcontracts and claims'
Material planProcurement > Material planproject.view; changes project.edit

All Projects

RuleWhat the system does
View permissionProjects app refused 'You do not have permission for this action.'
Company isolationNot found ('Record not found.'); A's customers, templates and dimension values refused on B ('Choose one from this company.')

Create Project

RuleWhat the system does
Create needs project.createRefused 'You do not have permission for this action.'

Project 360

RuleWhat the system does
Closing needs project.closeBoth refused 'You do not have permission for this action.'
Team member sees only what the role givesTasks, BOQ (selling side), Resources and Changes (no cost) open; Budget, Costs, Billing, Procurement figures refused or dashed

All Projects / Project 360

RuleWhat the system does
Cost and margin hiddenProfit Margin, Approved Budget, Actual / Committed / Forecast Cost show '—'; task budget cost and actual cost absent; Portfolio budget / forecast / profit columns empty

Budget / Estimation

RuleWhat the system does
Budget figures need budget and cost rightsBudget tab refused 'You do not have permission for this action.' (no project.budget.view); Costs summary and Forecast refused (no project.cost.view); timesheet cost column shows '—'

Timesheets

RuleWhat the system does
Approving time needs project.resource.assignRefused 'You do not have permission for this action.'
Nobody approves their own timeRefused 'Somebody else approves your time.' in both cases; status stays Submitted
Time and expense lock after submit'Submitted time is changed by its approver only.' / 'A submitted expense is changed by its approver only.'; editable again after Reject -> Back to draft

Expenses

RuleWhat the system does
Approving expenses needs project.budget.approveRefused 'You do not have permission for this action.'
Nobody approves their own expenseRefused 'Somebody else approves your expense.'

Subcontracts

RuleWhat the system does
Certification needs project.budget.approveRefused 'You do not have permission for this action.'
Claim over the verified amount refusedRefused 'Cannot certify more than was verified.'; certify needs project.budget.approve (editor with project.edit only refused)
Only active subcontracts take claimsRefused 'Activate the subcontract before claims.'

Project P&L

RuleWhat the system does
Margin viewBoth refused 'You do not have permission for this action.'; Project 360 Profit Margin shows '—'

Procurement

RuleWhat the system does
Closed project is read-onlyEach refused 'A closed or cancelled project is read-only. Reopen it through an authorised correction first.'
Requester cannot approve their own purchase requestRefused 'Somebody other than who asked must decide it.'; approval also needs project.budget.approve
Ordering needs an approved request and project.edit'Only an approved request can be ordered.' / 'You do not have permission for this action.'

Budget

RuleWhat the system does
Maker cannot approve their own budgetRefused 'Somebody other than who submitted it must approve it.'; the version stays Submitted
Approve and freeze need project.budget.approveEach refused 'You do not have permission for this action.'
Approved and frozen versions are lockedRefused 'Only a draft budget can be edited; revise the approved one instead.'
Budget change needs a second personPM-A: 'Somebody other than who asked for it must decide it.'; editor only: 'You do not have permission for this action.'

Estimation

RuleWhat the system does
Estimate edit versus approveView only: all refused; editor: Approve refused 'You do not have permission for this action.'; a Submitted estimate cannot be edited 'Only a draft estimate can be edited; make a new revision.'

BOQ

RuleWhat the system does
BOQ edit versus approve and locked once approvedApprove refused without project.budget.approve; Approved BOQ lines refused 'An approved BOQ is never edited; make a revised version.'
Cost rate and margin hidden without rightsCost rate, Estimated cost and Margin KPI are not shown; selling Rate, Amount, Certified and Progress are

Billing

RuleWhat the system does
Billing tab needs billing.view, actions need billing.createBilling tab refused 'You do not have permission for this action.'; view-only user: every action refused
No double invoicing and no edit of invoiced steps'This billing step is already invoiced.'; 'An invoiced billing step is history; it is not changed.'; 'An invoiced billing step cannot be deleted.'
A claim needs a named certifier when the raiser certifiesRefused 'Record who certified it (the customer's representative).'
One open application at a time and progress never goes back'Finish the open application first.'; 'Progress cannot go back from the last certified claim.'; 'Progress is 0 to 100.' for 101
Invoice needs a customerRefused 'The project needs a customer to invoice.' (the tab also tells the user to set one on Edit Project)

Changes

RuleWhat the system does
Approving a change needs project.change.approveRefused 'You do not have permission for this action.'
Raiser cannot approve own changeRefused 'Somebody other than who raised the change must decide it.'
Locked once under customer review; no skipping steps'A change under customer review or approved is not edited; raise another change.'; 'A change in Potential Change cannot move to Approved.'
Change list needs change.viewRefused 'You do not have permission for this action.'; cost impact and margin are dashes without cost / margin view

Costs

RuleWhat the system does
Posting and forecast need budget.edit; recognition needs billing.createEach refused 'You do not have permission for this action.'

Baselines

RuleWhat the system does
Baseline approval needs project.budget.approveSave allowed; approve refused 'You do not have permission for this action.'

Resource Planning

RuleWhat the system does
Resource views and assignment rightsPage refused; assignment refused 'You do not have permission for this action.'

Project Settings

RuleWhat the system does
Settings and configuration need project.configureReading works; every save and the scan refused 'You do not have permission for this action.' - grant project.configure to the tester's role to configure

Reports

RuleWhat the system does
Reports need project.report.view and drop cost / margin columnsMember refused; viewer sees a narrower report: budget, cost and profit columns removed, not shown as empty

Closed project

RuleWhat the system does
Billing, claims, changes and subcontract claims also read-only when closedEach refused 'A closed or cancelled project is read-only. Reopen it through an authorised correction first.'

Company isolation

RuleWhat the system does
Other company's files and photosNot found; nothing returned

Features

RuleWhat the system does
Turned-off capability refuses writes, keeps readsPOST refused 'capability_disabled' (409); GET still works; the menu entry disappears

Edit Project

RuleWhat the system does
Edit conflictB refused 'Somebody else changed this project. Reload it and try again.'

Audit

RuleWhat the system does
Key decisions are in the audit trailEvents project.budget.approve, project.claim.certified, project.change.approved, project.status with the actor and project code

Documents

RuleWhat the system does
Upload size and download right'Files must be 20 MB or smaller.'; download needs project.view (attachment, original file name)

Roles

RuleWhat the system does
Sensitive permissions are flaggedBoth marked sensitive (second-person assignment applies); the Project member role holds neither, nor any cost, margin, billing or budget right