Account Permissions

Account Permissions

In Kantata OX, Account-level permissions determine the overall privileges that are granted to team members. Each project participant also has individual permissions that can be configured at the Project level.

You select an account permission when you are first adding account members to Kantata, but you can also make updates later if their role changes or other changes arise that require them to see or do more than they currently can.

The following levels are available to select:

• Punch Clock—This permission level only allows members to collaborate on projects, log expenses, and create time entries (i.e. clock in and out) using the Timer. Account members with this setting can only see their own time entries in the Time & Expense area of Kantata; these entries are always billable and can only be edited by an Account Administrator.
  
  Note: A default Bill Rate is required in order to assign members the Punch Clock permission level.

• Collaborator (External)—This permission level allows External Members to collaborate on projects and track time and expenses for projects they are participants on. This permission level only allows members to see their own time entries in the Time & Expense area of Kantata.

• Collaborator—Account members with this permission level can collaborate on projects and track time and expenses when participating in projects. This permission level only allows members to see their own time entries in the Time & Expense area of Kantata.

• Project Creator—Everything above, plus the ability for members to create non-financial projects; they are not allowed to see member billing rates or manage project budgets. This permission level only allows members to see their own time entries in the Time & Expense area of Kantata.

• Project Lead—Everything above, plus the ability for members to create and manage financial projects, access other financial information, view and edit time entries from other project participants, view and edit billing rates, invoices, budgets, and use budgeted templates. Their names and addresses can also appear on project info and invoices.

• Report Viewer—Everything above, plus the ability for members to view Analytics reports—such as WIP and Utilization—to see Project and Task custom field information in projects, and to see time entries for their team in the Time & Expense area of Kantata.

• Report Viewer with Cost—Essentially the same as the Report Viewer permission, but members have the ability to view costs in Margin Reports, Estimates, Rates & Roles, the Project List, and more.

• Account Administrator—Everything above, plus the ability for members to manage account members (set default billing rates and permissions), invite additional members, edit billing information, edit account details and plan, see cost rates, change custom branding, and perform general account maintenance.
  Warning: Changing a user to an Account Administrator will automatically give them all Access Group permissions and promote them to Project Administrator in all of their projects, and their project permissions cannot be lowered while they remain an Account Administrator. Conversely, changing a user from an Account Administrator to one of the other permission levels will not automatically demote them from a Project Administrator in all of their projects; their permission in each project must be changed manually, if desired. It will, however, affect which Access Group permissions they have, which will be based on the selections in their new default Access Group.

Premier Default Project Permissions

The default Project Permissions for team members are inherited from their main Account Permissions. However, you can map different project defaults for each Account Permission level—on both the Provider or Client side of the project—using Project Permissions Defaults. This way, you can ensure that members join a project with the proper access and permissions every time.

In the table below, you can see which project permissions are available for each account permission: