Roles and permissions
Understand what admins, managers, developers, editors, and submitters can do.
Chronigami has five roles. A person can hold more than one. Permissions add together. Invited and deactivated people have no access, even if roles are still listed.
Role names in the app: Admin, Manager, Developer, Editor, and Submitter.
Permission table
The table summarizes what each role can do today. Details follow in later sections.
| Role | Time tracking | Portal | Workspace settings and billing | Uses a seat |
|---|---|---|---|---|
| Admin | Full access: all entries, reports, setup (tags, projects, businesses, captured fields), connect Backlog | Portal app Manage (portals and forms); Workspace settings Portal tab | Workspace settings (all tabs), Users, Invitations, Billing, connect Backlog spaces | Time tracking seat and portal seat when each product is subscribed |
| Manager | Same data and reports as admin for time; can edit anyone’s entries; invite Manager and Developer only | No Portal Manage; cannot grant portal roles | Users, Invitations; Workspace settings Time tracking tab only (not General, Branding, or Portal) | Time tracking seat when subscribed |
| Developer | Own time entries and allowed reports; browser extension timer; cannot invite | No Portal Manage | Account settings only | Time tracking seat when subscribed |
| Editor | No time-tracking pages (404) | Portal app Manage; invite Editor and Submitter | Users, Invitations; cannot change time-tracking roles | Portal seat when subscribed |
| Submitter | No time-tracking pages (404) | Submit on portal (public or members-only) | Account settings only; GET workspace flags to load the portal | No portal seat (free) |
Note
Submitters do not use a portal editor seat. Admins count toward seats on each subscribed product they need.
Seats by product
When a product is on a paid plan or trial with seat limits:
- Time tracking — active Admin, Manager, and Developer each use one seat.
- Portal — active Admin and Editor each use one seat. Submitter does not use a seat.
See Seats for trials, plan changes, and freeing seats.
Choosing roles
Match roles to the products you use:
- Time tracking — Manager (oversight, reports, setup) and Developer (logging time and using the extension).
- Portal — Editor (build portals and forms in the Portal app) and Submitter (send requests only).
- Admin — at least one person who can manage Billing, Workspace settings, and Backlog connections.
Combine roles when one person does both kinds of work. Choosing products explains how the products fit together.
Changing someone’s roles
Who can change roles
| Actor | Can grant or remove |
|---|---|
| Admin | Any role on any active user |
| Manager | Manager and Developer only; other roles on that user must stay unchanged |
| Editor | Editor and Submitter only; other roles on that user must stay unchanged |
Developers and submitters cannot change roles.
What happens when roles change
- Open Users in the Chronigami web app.
- Select Edit roles on a person.
- Check or clear Admin, Manager, Developer, Editor, and Submitter.
- Save.
When roles actually change, Chronigami signs that person out on every device and issues a new session only to the person who made the change (if they edited their own roles and stay active).
Granting a paid role can fail with No seats are available. Ask an admin to add seats. if the product is subscribed and seats are full. See Seats.
The API blocks demoting or deactivating the last admin in the workspace.
Read-only workspace
When Time tracking is read-only, the Users page may show that time-tracking role changes are turned off. You can still Deactivate someone.
Related articles
Still need help?
Contact supportRelated articles
- Choosing productsDecide whether your team needs time tracking, the portal, or both.
- Inviting your teamInvite teammates to your workspace and assign their roles.
- Users and invitationsManage active people, change roles, and deactivate or reactivate accounts.
- SeatsHow seats are counted, trial limits, and how to add capacity by changing plans.