Controlling what Users can Access 55 CHAPTER 11 Controlling what Users can Access This chapter provides information on setting up permission profiles to define the data and features users can access. Understanding Permission Profiles Permissions profiles are sets of individual enabled permissions. You can create multiple permission profiles and then assign them to users. Methods for Setting Up Permission Profiles When designing permission profiles, you can either: • Create a permission profile with ALL of the permissions a certain type of user will need, and then assign that single profile to those users • Create multiple permission profiles and assign combinations of these profiles to users, for an addi- tive effect. For example, you can create a profile for using timesheets and a profile for booking time off. If you assign both these profiles to a user, the user will be able to use timesheets and book time off. You can also create a profile template, and base new profiles on that template. This works well if users share a number of permissions, but require small changes to their permission sets. How Permission Profiles Work with License Seats The features users have access to depends on both their assigned permissions and their license seats. For example, a user may be assigned a permission to enter expenses. However, if the user does not have a seat for the Expense module, they will not be able to enter expenses. External User Permissions If you are using the Project & Billing Edition, you can create external users to provide those outside your organization access to Web TimeSheet. Only limited permissions are available to external users. As a result, separate permission profiles are created for external users, under the External Users tab of the Permis- sions page. The permissions available to external users are limited to: • Approval functions • Access to run reports • Visibility to project details They cannot enter time, time off, or expenses. External users are discussed further at Standard versus Ex- ternal Users on page 71. Setting Up Permission Profiles Permission profiles can be configured at: Administration > Users/Departments > Permissions