Person's worktime role gives permissions to see and edit information in the Work time section.
There is another role for viewing and editing person's information, as well as shift planning. More on this topic in roles.
See also: Assigning roles.
From service point of view, admin user has Administrator as role and All permissions as Worktime role.
In general, employees have narrower permissions than supervisors. Administrators have the most extensive permissions. There are few existing worktime roles in the service by default, but worktime roles can also be modified or completely new ones created. A person can have more than one worktime role at the same time.
Worktime roles can be viewed and edited in Worktime > Administration > Worktime roles.
Choose the worktime role you want to edit, then choose "worktime role permissions" as action.
The worktime roles below can be found in the service by default. There might be other worktime roles established in your environment instead of or in addition to the ones below.
"Kaikki oikeudet (All permissions)" grants permission to lower, medium and high level rights.
"Omien sekä alaisten tietojen muokkausoikeus (Permission to edit own and subordinates' data)" gives the permission to edit the person's own and subordinate's data. This work time role usually has all the lower-level permissions, most of the medium-level permissions, and at least some of the higher-level permissions.
"Omien tietojen katseluoikeus, alaisten muokkausoikeus (Permission to view own data, edit data of subordinates " gives permission to see your own events and modify the events of subordinates. This worktime role can have very limited rights, i.e. people can only report hours using Current Status, mobile or terminal and add comments in the calendar. Or they may have most of the lower level rights and some of the medium-level rights.
Worktime role permissions
The current permissions of worktime roles can be changed by selecting the desired rights from the list and then clicking Save. New worktime roles can also be created, and their permissions can be customized by selecting the wanted rights from the list. The permissions are divided into three different levels; lower level, medium level and higher level. Permissions can be given to a worktime role either one whole level at a time (by selecting 'All lower level rights' for example), or you can choose a permission to be granted from each level individually. What each permission does is explained in more detail below.
Lower-level permissions
| Title | Description |
|---|---|
| Communication | |
| Can read notifications |
Persons with this permission can view notifications from the Communication pages. Note: Communication functionality must be enabled for deployment. |
| Can create new notifications |
Persons with this permission can create notifications for other persons. Note: Communication functionality must be enabled for deployment. |
| Can edit/delete their own notifications |
Persons with this permission can edit and delete their own notifications once created. Note: Communication functionality must be enabled for deployment. |
| Work hours | |
| Can record own real-time events in the current status page and mobile |
Persons with this permission can use the "Current status" page and mobile pages to record events (i.e. "start work", "stop work" etc.) in real-time. Note: activity reporting functionality must be enabled for deployment. |
| Can review own events |
Persons with this permission can see their own events in the calendar and reports. Note: activity reporting functionality must be enabled for deployment. |
| Can view attachments in own events |
Persons with this permission can view files that have been attached to their own events. Note: attachment support must be enabled for deployment. |
| Can view own sick leave compensation | Persons with this permission can view (not edit) the Compensation field (e.g. Paid, unpaid) on their own sick leave events. |
| Can create and edit own event notes | Persons with this permission can create "Notes" events and add notes to other event types. |
| Can edit own request message | |
| Can define hour to hour for own working events |
Persons with this permission can set their own work events to earn "Hour to hour" time after they have fulfilled their daily/weekly work obligations. If they are not permitted to set the overtime target, they will still be able to see it. Note: The overtime targeting options visible to users can be configured in the Worktime settings under Work hours > Accruals and overtime hours. To be able target Hour to hour time to an accrual like Balance, the accrual must be enabled and the corresponding "Visible overtime options" must also be enabled. |
| Can set overtime for own working events | Same as above but for overtime pay. Overtime paid to salary, overtime paid to balance etc. |
| Can set supplements for own work events |
Persons with this permission are permitted to add supplements to events e.g. lunch coupons, expenses etc. Note: supplements must be configured in Worktime settings. |
| Can view rules for worktime calculation |
Persons with this permission can view their own working hours, permitted work times and expected working times by clicking on the date in the calendar view. |
| Work shifts | |
| Can review personal work shifts |
Persons with this permission can view their own planned work shifts. Note: Work shift planning must be enabled for deployment. |
| Can view work shifts of users in own person group | Same as above but permits to also view planned work shifts from persons in the same Person group. |
| Projects | |
| Can review projects |
Can persons in this role view (not edit) the full project list and details of each project (name, code, notes, dates etc). This does NOT affect recording of project time against an event. Note: project functionality must be enabled for deployment. |
Medium-level permissions
| Title | Description |
|---|---|
| Communication | |
| Can add/edit/delete notifications |
Persons with this permission can add, edit and delete notifications for all users. Note: Communication functionality must be enabled for deployment. |
| Work hours | |
| Can edit own personal entries |
Persons with this permission can edit their own events. Note: there may be more specific permissions that override this permission for certain event types e.g. types that hold sensitive information like sick leave (see below). |
| Can edit own event requests |
Persons with this permission can add/edit their own event requests. |
| Can edit attachments in own events |
Persons with this permission can edit/delete files attached to their own events. Note: attachment support must be enabled for deployment. |
| Can edit own approved events with no end time | If a person's unfinished/open-ended event (e.g. a sick leave when the end date is not known yet) gets approved by a supervisor, persons with this permission can edit the event until it's closed. Note: Editing is not just the end date/time field but whatever their normal event editing permissions allow. |
| Can approve personal events | Persons with this permission can approve their own events. Gives the right to define compensation for absences (unpaid, reduced salary, paid) when creating or editing an event. |
| Can review subordinates entries | Persons with this permission can view (not edit) their subordinate's events. |
| Can view attachments in subordinates' events | Persons with this permission can view (not edit) their subordinate's event attachments. |
| Can edit and approve subordinates entries |
Persons with this permission can view, edit, delete and approve subordinates' events and modify their permitted working hours. Gives the right to define compensation for absences (unpaid, reduced salary, paid) of the subordinate's entry. Also right to accept event requests made by subordinates. |
| Can edit attachments in subordinates' events | Persons with this permission can view, edit and delete their subordinate's event attachments. |
| Can view everyone in presence view | Persons with this permission can view all other persons in the presence report (Worktime > Reports). |
| Can view everyone in dining reports |
Persons with this permission can view all other persons in the dining reports. |
| Can edit correction events |
Persons with this permission can create/edit/delete Correction event types intended for adjusting salary compensation. This applies to the person's own Correction events and their subordinates Correction events. Note: Correction type supplements must be configured in Worktime settings. |
| Work shifts | |
| Can review all users' work shifts |
Persons with this permission can view planned work shifts for all persons from the "Work shifts" reporting pages. Note: Work shift planning must be enabled for deployment. |
| Sick leave | |
| Can view subordinates sick leave compensation | Persons with this permission can view the Compensation field (e.g. Paid, unpaid) for their subordinate's sick leave events. |
| Can edit information about own medical certificate | Persons with this permission can edit the Medical certificate field (Received, not received etc.) for their own sick leave events. |
| Can edit subordinates medical certificates | Persons with this permission can edit the Medical certificate field (Received, not received etc.) for their subordinate's sick leave events. |
| Can edit own sick leave compensation | Persons with this permission can view and edit the Compensation field (e.g. Paid, unpaid) on their own sick leave events. |
| Can edit subordinates sick leave compensation | Persons with this permission can view and edit the Compensation field (e.g. Paid, unpaid) on their subordinate's sick leave events. |
| Can edit own reason code | Persons with this permission can view and edit the sick leave reason code for their own sick leave events. |
| Can edit subordinates reason codes | Persons with this permission can view and edit the sick leave reason code for their subordinate's sick leave events. |
| Projects | |
| Can report EU/ELY-centre project hours for managed projects | Persons with this permission can take EU/ELY-centre project report for their managed projects. |
High-level permissions
| Title | Description |
|---|---|
| Work hours | |
| Can view events of all personnel | Persons with this permission can view (not edit) the events of all persons in calendars and reports. |
| Can view attachments in all events | Persons with this permission can view attached files in all persons' events. |
| Can edit and approve all users events | Persons with this permission can create, edit and approve all persons' events. |
| Can edit attachments in all events | Persons with this permission can view and edit attached files in all persons' events. |
| Can lock event dates |
Persons with this permission can lock event/calendar dates. Locked dates won't allow events to be added/edited or deleted unless the person doing the edit also has permission to unlock the dates. For the person to lock their own calendar dates requires the medium level permission "Can approve personal events" (or higher equivalent permission) to also be set. For the person to lock events for other persons, they need permission to review and edit their calendars e.g. using "Can review subordinates entries" (or higher equivalent permission). |
| Can unlock locked dates | Persons with this permission can unlock event/calendar dates that have been locked (for which persons depends on their other permissions, see previous permission for more details). |
| Can administer annual leaves and their balances |
Persons with this permission can create/edit/delete events that change annual leave/holiday such as Annual leave earning reset and Annual leave earning change. Note: To add these event types through the calendar they must also be activated in "Worktime settings > Work hours > Event types" |
| Can review all users annual leave reports | Persons with this permission can view all users (regardless of other permissions) in the annual leave reports. |
| Can administer balances |
Persons with this permission can create/edit/delete events that change accrual values such as bank, balance etc. This includes all accruals except Annual leave which has a separate permission (see above). Note: To add these event types through the calendar they must also be activated in "Worktime settings > Work hours > Event types". |
| Can define exceptions to own work obligation | Persons with this permission can change their own work day and work week obligations (lengths). |
| Can set exceptions to own permitted work times | Persons with this permission can change their own permitted work times. Working outside of permitted work times is unpaid. |
| Can edit all users dining events | Persons with this permission can view and edit the dining events for all users. |
| Can edit approved events | Persons with this permission can edit an event once it has been approved. They can only edit approved events from other persons if they have permission to view and edit their events in the first place. |
| Can view external identifier of events | Persons with this permission can view external identifier of events. |
| Can edit external identifier of events | Persons with this permission can edit external identifier of events. |
| Can view salary information of all personnel | If displaying payslips is enabled in the calendar view, persons with this permission can view the payslips for all persons. |
| Projects | |
| Can manage projects and project relations | Persons with this permission can add/edit/delete projects inthe project administration, as well as add project managers to projects. |
| Can report project events for all persons | Persons with this permission can report project events for all persons. |
| Administration | |
| Can manage persons' settings and projects | Persons with this permission can edit person settings, projects related to persons, and projects managed by the person. |
| Can manage person groups | Persons with this permission can edit person group information, person group settings, persons related to the person group, and projects related to person groups. |
| Can manage person setting groups | Persons with this permission can edit worktime setting group information, group settings. Note, also setting group members. |
| Can manage Worktime roles | Persons with this permission can manage roles and permissions related to Worktime. Important: this means that user effectively has all permissions listed on this page as they are able to set their own permissions and permissions of every other user. |
| Can take integration exports | Persons with this permission can use the "Administration > Integration" area to run imports and exports. Important: this permission effectively grants persons ability to export and import data of any person(s). |