Fanurio determines what users can and cannot do based on the role, projects and tasks assigned to them.
Roles are assigned to users when their account is created but they can be changed later. For instance, users that have the Co-worker role can be assigned the Manager role if they need to create tasks and assign people to them.
Users can have one of the following roles.
-
Individual: This role is ideal for people who work alone on projects and don't need to see what others are working on.
Individuals can record expenses, trips, and time on tasks assigned to them. They can't see records of other users or tasks assigned to other users. If they are assigned to the same tasks or projects as other users, they don't know it.
Individuals are not allowed to see or change any billing details.
-
Co-worker: This role is ideal for members of a team who need to collaborate with others on their projects.
Co-workers are similar to Individuals but with additional permissions that allow them to see what the other project members are working on. Just like Individuals, they can change only their own records.
Co-workers are not allowed to see or change any billing details.
-
Manager: This role is ideal for people who need to manage a group of people on their projects.
Managers are similar to Co-workers but with additional permissions that allow them to manage a project. They can assign people to projects, create tasks and assign people to them. Managers need to be assigned to projects by someone else first.
Managers are not allowed to see or change any billing details.
-
Admin: Admins have all permissions.
Some features are not available to Admins when accessing Fanurio in client mode. Managing users and inviting people to create an account must be done on the server to protect sensitive data like passwords.
The user created when setting up Fanurio for the first time has the Admin role by default. Also, the default user created when upgrading from the standalone version to the server version has the Admin role.
Only Admins are allowed to see and change billing details like pricing, taxes, invoices or payments.
Roles apply to all projects, a user can't have different roles for different projects. A user with Manager role is a Manager for all projects.
Non-Admin roles have access to a partial copy of the data available on the server to protect sensitive information like billing details or personal information. For instance, billable tasks are downloaded without billing settings.
The following table lists the permissions for each role.
Table 6.1. Roles and permissions
| Permission | Admin | Manager | Co-worker | Individual |
|---|---|---|---|---|
|
Billing |
||||
| Manage invoices, payments, deposits, catalog items, products, and trip rates | + | |||
| View billing settings for business, clients, projects, tasks, task categories, time entries, expenses, expense categories, and trips | + | |||
|
People |
||||
| Manage people and invitations | + | |||
| View other people (only names, no other details) | + | + | + | + |
| Update their account (name and password) | + | + | + | + |
|
Business |
||||
| Update settings | + | |||
| View currencies (for expenses), taxes (for expenses) and the default distance unit (for trips) | + | + | + | + |
|
Task categories and expense categories |
||||
| Manage categories | + | |||
| View categories | + | + | + | + |
|
Clients |
||||
| Manage clients | + | |||
| View assigned clients (only names, no other details) | + | + | + | + |
|
Projects |
||||
| Manage projects | + | |||
| Move projects | + | |||
| Assign projects to others | + | + | ||
| Grant and revoke project access | + | + | ||
| View members of assigned projects | + | + | + | |
| View assigned projects | + | + | + | + |
|
Tasks |
||||
|
Manage tasks Tasks created by users without billing permissions are saved as billable on the server if they are added to a billable project where tasks are billable by default (). The billing settings of a new task are either the billing settings of its category if the task uses a billable task category or the billing settings of its project. |
+ | + | ||
| Assign people to tasks | + | + | ||
| View tasks assigned to other users | + | + | + | |
| View tasks assigned to them | + | + | + | + |
|
Time, Expenses, Trips |
||||
| Approve reimbursable expenses | + | |||
| Manage records of other users | + | |||
| View records of other users | + | + | + | |
|
Manage their own records Note: Users can record time only on tasks assigned to them. Note: Records created by users without billing permissions are saved as billable on the server if:
|
+ | + | + | + |
Admins can add people on the server from if the server is running as a desktop app, from the command line if it's running as a CLI app or from the web.
When adding people directly, Admins need to set a username and a password for them.
New person dialog
The dialog also allows Admins to send email invitations to other people to create accounts if email notifications are enabled. Invitations allow people to set their own username and password.
 |
Invite people dialog
All new users whether they are added directly or invited must have a role that defines what they can and cannot do. The role can be changed later if needed.
Admins can deactivate people on the server from if the server is running as a desktop app, from the command line if it's running as a CLI app or from the web.
People who don't need to access the application anymore can be deactivated, it's not possible to remove a person who added at least one record.
Edit person dialog
Inactive users can no longer log in but they can be activated later if they need to access the application again. Inactive users don't count towards the license count, only active users do.
Admins can change the role of other users on the server from if the server is running as a desktop app, from the command line if it's running as a CLI app or from the web.
When the role of a user is changed, Fanurio notifies the user about it the first time he or she connects to the server to synchronize their data. When that happens, Fanurio also resets the local repository to download the data the user is allowed to access.
User role change notification
If there are any local changes that haven't been synchronized, Fanurio exports them to disk so they can be reviewed manually. Since reviewing local changes manually can be a laborious process, admins should ask their users to synchronize local changes before changing their role. If a user hasn't synchronized their changes, admins can revert their role temporarily so they can synchronize them.
Admins can access all projects but non-Admins must be assigned to one or more projects in order to access them. Admins can grant and revoke project access to other users in two ways.
-
By project when a new project is added and one or more people must be assigned to it.
In the New Project or Edit Project window, go to Members and click Add to one or more people to the project.
-
By person when a new person is added and he or she must be assigned to one or more projects.
Go to and double-click a person to change the projects assigned to them.
Managers can also grant and revoke project access to others but they need to be added to a project first by someone else, most likely an Admin.
Project memberships notification
When a user is added to or removed from a project, Fanurio notifies the user about it the first time he or she connects to the server to synchronize their data.
Task assignments make it possible to control who can see tasks and record time on them.
Self assign to task for Admin and Manager users
Record time
If a person is not assigned to a task, they can't add time to it or move one of their time entries to it. This applies to all users, including Admins and Managers.
Assign tasks
Admins and Managers can create and assign tasks to the members of a project from the New Task / Edit Task windows. Admins and Managers can also delete an assignment but only if the assigned person hasn't recorded time on the task.
Even though Admins can see all projects, they must be added explicitly to a project if they need to be assigned to its tasks. If only one person is active, that person will be assigned to new tasks automatically.
Duplicating a task will also duplicate its assignments but only if the assigned people are members of the target project. A task can be duplicated to the same project or to a different project that can have different members.
Duplicating a project will also duplicate its tasks and their assignments. If a person is not a member of the new project, their assignments are not duplicated.
Tasks can be moved only to projects that have all their assignees as members.
Access tasks
Individual users can see only tasks assigned to them while all the other users can see all tasks from their projects.
To see who is assigned to a task, right-click any column name from the Tasks tables to show the columns menu and check Assignees to make it visible. To search tasks by Assignees, click the search icon above the Tasks table and select Assignees.
|
Copyright © 2006-2024 Fanurio Time Tracking SRL |