User Roles

TT Time Tracker has four roles. Each role is assigned per-workspace, so a person can be an admin in one workspace and a worker in another.

Role summary

Capability	Worker	Responsible	Admin	Super Admin
Log time entries (own)	✓	✓	✓	✓
Edit own entries (before approval)	✓	✓	✓	✓
Upload invoices	✓	✓	✓	✓
View own invoices	✓	✓	✓	✓
View all entries and invoices	—	✓	✓	✓
Approve / reject entries	—	✓	✓	✓
Approve invoices	—	✓	✓	✓
Manage users (invite, archive)	—	—	✓	✓
Manage projects, tasks, vehicles	—	—	✓	✓
Configure workspace settings	—	—	✓	✓
Configure email sync	—	—	✓	✓
Manage API keys and webhooks	—	—	✓	✓
Manage multiple workspaces	—	—	—	✓
Create / delete workspaces	—	—	—	✓

Worker

The default role. Workers can log their own time, upload invoices, and view their own submission history. They cannot see other workers' data or access the admin section.

Responsible

A step up from Worker. A responsible user is typically a project manager or team lead. They can see all entries and invoices across the workspace and approve or reject them. They cannot modify workspace settings or manage users.

A user becomes responsible automatically when they are set as the responsible person on at least one project.

Admin

Full control over the workspace. Admins can manage all data, users, settings, and integrations. There can be multiple admins per workspace.

Owner

The admin who holds the workspace. An owner has every admin capability, and is protected from the other admins: nobody can remove their owner role, and nobody can reset an owner's password from the Users page — not another admin, another owner or a super admin. An owner changes their password with Mot de passe oublié on the sign-in page.

Super Admin

A platform-level role (not workspace-level). Super admins can access and manage all workspaces. This role is assigned by a system administrator directly in the database or via the super-admin UI.