User roles & permissions

Every person in docket has exactly one role. The role decides which areas of the app they see and — most importantly — whether they see money: rates, revenue, budgets and everything under Accounting.

New users start as Basic unless you pick a different role when creating them.

The four roles at a glance

Think of them as a ladder — each step up includes everything below it:

	Timetracker	Basic	Project Manager	Admin
Book time, work with tickets	✓	✓	✓	✓
See all projects	—	✓	✓	✓
See others' booked time	—	✓	✓	✓
See revenue, budgets, rates	—	—	✓	✓
Accounting (quotations & invoices)	—	—	✓	✓
Create projects, edit project settings	—	—	✓	✓
Publish invoices	—	—	—	✓
Admin area (users, customers, contacts, services, suppliers, billing, integrations)	—	—	—	✓

Timetracker

The most restricted role — built for freelancers or externals who only log hours.

• Sees only the projects they're assigned to — either directly on the project, or via an assignment to the project's customer — and only those projects' tickets, also in the search.
• In time listings they see only their own entries, never their colleagues'.
• No rates, no revenue, no budgets, no Accounting.

Basic

The default role for team members.

• Sees all projects and tickets and everyone's booked time — full visibility into the work.
• Books time, comments, gets assigned to tickets.
• Sees no financial data: no rates, revenue, budgets, or the Accounting area. Controlling pages show hours, not money.

Project Manager

Everything Basic can do, plus the commercial side:

• Sees financial data everywhere: budgets, revenue, rates, project controlling.
• Full access to Accounting: create and edit quotations, order confirmations, invoices and delivery notes, delete drafts — and mark sent invoices as paid.
• Creates projects, edits project settings (rates, budgets, phases, labels, Jira link).
• Manages external costs, and adds a new supplier right from the external-cost form.

One deliberate limit: a Project Manager can prepare an invoice, but only an Admin can publish it (give it a number and make it final). The Admin area — users, customers, contacts, services, suppliers — is for Admins only.

Admin

Everything, including the parts that change how the whole workspace works:

• The Admin area: create and edit users, set roles and project assignments, archive people who leave, manage customers, contacts, services & rates, suppliers, and your docket subscription.
• Publish invoices — and take a published one back to edit mode for a last correction, as long as it isn't paid or canceled. An issued invoice is never deleted, by anyone: cancel it instead.
• Delete projects and customers.
• Set up integrations (e.g. the Jira connection) and account-wide settings like invoice numbering, document footers and your logo.

Admins can't change their own role or archive themselves — so you can't lock yourself out.

Changing someone's role

Admin → Users → select the person → Edit. Pick the role in the Role field and save. The change applies immediately — the person sees the new navigation on their next page load.

Which role should I give someone?

• Someone who only bills hours to specific projects → Timetracker
• A team member doing the work → Basic
• Someone who runs projects and talks money with clients → Project Manager
• Someone who runs the workspace → Admin (keep it to a few people)