Bind Consultants, Contacts and Subcontractors to verified principals.
Roles and permissions
Separate delivery ownership, staffing, financial release and external client access.
Permissions
Summarised from the authored role permissions. Scope restrictions such as “own records” still apply; these symbols do not indicate completeness or runtime access.
| Table | Services Leader / COO | Practice Lead | Project Manager | Resource Manager | Consultant | Subcontractor | Client | Accounts |
|---|---|---|---|---|---|---|---|---|
| master | ||||||||
Clients | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | View: View Projects, Clients, ClientApprovals and approved TimeEntries or ExpenseItems needed for billing |
Consultants | —No table-specific permission stated | —No table-specific permission stated | View: View Consultants (no cost rate) | View: view Consultants with bill rate and skills (no cost rate) | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated |
| transaction | ||||||||
Projects | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | View: View Projects, Clients, ClientApprovals and approved TimeEntries or ExpenseItems needed for billing |
ProjectTasks | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | Specific actions: update own ProjectTasks.Status | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated |
ResourceRequests | —No table-specific permission stated | Specific actions: Approve ResourceRequests, ExpenseReports (escalation), ChangeOrders, and SubcontractorPOs for own practice | —No table-specific permission stated | Specific actions: update ResourceRequests (propose, mark Filled) | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated |
Timesheets | —No table-specific permission stated | —No table-specific permission stated | Specific actions: Approve Timesheets and ExpenseReports against own projects | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated |
ExpenseReports | —No table-specific permission stated | Specific actions: Approve ResourceRequests, ExpenseReports (escalation), ChangeOrders, and SubcontractorPOs for own practice | Specific actions: Approve Timesheets and ExpenseReports against own projects | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated |
RevenueRecognition | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | Manage / maintain: Manage Invoices, InvoiceLineItems, BillingSchedules, RetainerAccounts and RevenueRecognition |
ChangeOrders | Specific actions: Approve SubcontractorPOs and ChangeOrders above configured threshold | Specific actions: Approve ResourceRequests, ExpenseReports (escalation), ChangeOrders, and SubcontractorPOs for own practice | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated |
SubcontractorPOs | Specific actions: Approve SubcontractorPOs and ChangeOrders above configured threshold | Specific actions: Approve ResourceRequests, ExpenseReports (escalation), ChangeOrders, and SubcontractorPOs for own practice | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | View: view own SubcontractorPOs | —No table-specific permission stated | —No table-specific permission stated |
ClientApprovals | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | View: View Projects, Clients, ClientApprovals and approved TimeEntries or ExpenseItems needed for billing |
BillingSchedules | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | Manage / maintain: Manage Invoices, InvoiceLineItems, BillingSchedules, RetainerAccounts and RevenueRecognition |
| line item | ||||||||
TimeEntries | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | View: View Projects, Clients, ClientApprovals and approved TimeEntries or ExpenseItems needed for billing |
ExpenseItems | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | View: View Projects, Clients, ClientApprovals and approved TimeEntries or ExpenseItems needed for billing |
| finance | ||||||||
Invoices | —No table-specific permission stated | —No table-specific permission stated | Specific actions: Submit Invoices for review | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | Manage / maintain: Manage Invoices, InvoiceLineItems, BillingSchedules, RetainerAccounts and RevenueRecognition |
InvoiceLineItems | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | Manage / maintain: Manage Invoices, InvoiceLineItems, BillingSchedules, RetainerAccounts and RevenueRecognition |
SubcontractorInvoices | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | Specific actions: upload SubcontractorInvoices against own POs | —No table-specific permission stated | —No table-specific permission stated |
RetainerAccounts | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | —No table-specific permission stated | Manage / maintain: Manage Invoices, InvoiceLineItems, BillingSchedules, RetainerAccounts and RevenueRecognition |
- Services Leader / COOAccess all reportssees cost rates and margin on every project
- Practice LeadAccess Utilization & Bench and Project Profitability scoped to own practice
- Resource Manageraccess Utilization by Person, Bench Report, and Open Resource Requests
- ConsultantNo access to cost rates, peer timesheets, invoices, or margin
- AccountsApprove invoice release prepared by another personReconcile accounting acknowledgmentsView cost and financial reports only within assigned entity scopeCannot approve own expenses, client decisions or bypass required project approvals
How permissions work
5 rulesEnforce legal-entity, practice and project scope in APIs and reports.
Keep cost rates and internal margin restricted to authorized leadership and finance roles.
Review time at project-entry scope and prevent self-approval.
Client and subcontractor access remains limited to addressed decisions and active contractual scope.
The roles
Services Leader / COO
Runs the services business. Owns portfolio margin, utilization, revenue backlog, and delivery health. Approves largest-tier change orders and subcontractor POs.
Permissions and screens
Readon all tablesCRUDon PortfolioProgramsApproveSubcontractorPOs and ChangeOrders above configured thresholdAccessall reportsseescost rates and margin on every project
Utilization by PersonConfirmed
ConsultantConsultant PracticeRoleStart Date
Past-Due InvoicesSent
Invoice NumberClientProjectDue Date
Over/Under BudgetActive
Project NumberNameBudget HoursActual Hours
due todayStatusConfirmedActive
Practice Lead
Runs a service line. Owns practice utilization, bench, and delivery quality. Reviews all projects in the practice, approves mid-tier change orders and subcontractor POs.
Permissions and screens
Readon Projects where Practice = ownCRUDon Consultants where Practice = own (excluding CostRate — SL/Admin only)ApproveResourceRequests, ExpenseReports (escalation), ChangeOrders, and SubcontractorPOs for own practiceAccessUtilization & Bench and Project Profitability scoped to own practice
SubmittedYou
- TMS-62540 CNS-3793 in 2 d
- TMS-15138 CNS-1972 in 6 d
- TMS-22692 CNS-6310 in 2 d
- TMS-76314 CNS-6374 in 5 d
- TMS-86276 CNS-4613 in 10 d
TMS-62540
- Consultant
- CNS-3793
- PeriodStart
- 19 Sep
- TotalHours
- 40.00
- BillableHours
- 32.00
- SubmittedAt
- 18 Sep
Project Manager
Runs one or more engagements end-to-end. Owns project plan, staffing requests, approvals, client status, change orders, and invoicing prep.
Permissions and screens
CRUDon Projects where ProjectManager = current user, plus related ProjectPhases, ProjectTasks, ResourceRequests, ChangeOrders, ProjectStatusReports, RiskRegister, IssuesApproveTimesheets and ExpenseReports against own projectsSubmitInvoices for reviewViewConsultants (no cost rate)
SubmittedYou
- TMS-62540 CNS-3793 in 2 d
- TMS-15138 CNS-1972 in 6 d
- TMS-22692 CNS-6310 in 2 d
- TMS-76314 CNS-6374 in 5 d
- TMS-86276 CNS-4613 in 10 d
TMS-62540
- Consultant
- CNS-3793
- PeriodStart
- 19 Sep
- TotalHours
- 40.00
- BillableHours
- 32.00
- SubmittedAt
- 18 Sep
Resource Manager
Owns the forward capacity plan across practices. Matches open ResourceRequests to available Consultants; tracks bench and holds firm utilization to target.
Permissions and screens
CRUDon ResourceAssignmentsupdateResourceRequests (propose, mark Filled)viewConsultants with bill rate and skills (no cost rate)accessUtilization by Person, Bench Report, and Open Resource RequestsReadon Projects for staffing context
Open Resource RequestsOpen
Request NumberProjectRoleRequired Skills
Utilization by PersonConfirmed
ConsultantConsultant PracticeRoleStart Date
My Timesheets
Timesheet NumberPeriod StartPeriod EndTotal Hours
StatusOpenProposed
Consultant
Delivery-team member. Logs time, submits expenses, completes tasks, updates own task status.
Permissions and screens
CRUDon own Timesheets, TimeEntries, ExpenseReports, ExpenseItemsReadon Projects and ProjectTasks where assignedupdateown ProjectTasks.StatusReadon own ResourceAssignmentsNoaccess to cost rates, peer timesheets, invoices, or margin
You
| Timesheet Number | Period Start | Period End | Total Hours | Billable Hours |
|---|---|---|---|---|
| TMS-51252 | 27 Sep | 04 Oct | 40.00 | 32.00 |
| TMS-39174 | 20 Sep | 24 Sep | 40.00 | 32.00 |
| TMS-69438 | 20 Sep | 26 Sep | 40.00 | 32.00 |
| TMS-86472 | 24 Sep | 03 Oct | 40.00 | 32.00 |
| TMS-23117 | 17 Sep | 26 Sep | 40.00 | 32.00 |
| TMS-64338 | 20 Sep | 25 Sep | 40.00 | 32.00 |
Subcontractor
External contractor — scoped to projects tied to an active SubcontractorPO.
Permissions and screens
CRUDon own TimeEntries against in-scope ProjectsuploadSubcontractorInvoices against own POsviewown SubcontractorPOsNoaccess to Consultants, other projects, or any rates beyond own pay rate
Client
External client user. Views project status, approves T&M time and expenses, approves milestones and deliverables, signs off on change orders.
Permissions and screens
Readon own Clients record, related Contacts, own Projects, ProjectStatusReports, ChangeOrders, and InvoiceLineItems where Client = selfCRUDon ClientApprovals addressed to selfNoaccess to Consultants.CostRate, other clients' data, utilization reports, or internal cost / margin figures
Pending
- CA-72317 PRJ-14178 9 d
- CA-12395 PRJ-21502 in 10 d
- CA-73517 PRJ-75901 10 d
- CA-38427 PRJ-17901 9 d
- CA-44178 PRJ-42994 in 8 d
CA-72317
- Project
- PRJ-14178
- Type
- Timesheet
- RequestedFrom
- CNT-5098
- RequestedAt
- 08 Sep
The CO routes for internal approval (Practice Lead → Services Leader over threshold), then to the client via a ClientApproval.
Accounts
Finance operator who reviews invoices, reconciles collection outcomes and releases approved recognition journals.
Permissions and screens
ViewProjects, Clients, ClientApprovals and approved TimeEntries or ExpenseItems needed for billingManageInvoices, InvoiceLineItems, BillingSchedules, RetainerAccounts and RevenueRecognitionApproveinvoice release prepared by another personReconcileaccounting acknowledgmentsViewcost and financial reports only within assigned entity scopeCannotapprove own expenses, client decisions or bypass required project approvals
PendingApproval
- INV-24231 PRJ-12658 2 d
- INV-74052 PRJ-11944 1 d
- INV-90630 PRJ-25258 7 d
- INV-65361 PRJ-64230 3 d
- INV-26982 PRJ-69918 3 d
INV-24231
- Project
- PRJ-12658
- Client
- CUS-113
- PreparedBy
- CNS-2074
- InvoiceDate
- 15 Sep
- TotalAmount
- 17,366.29
Approval waits for the accounts.
ERP•AI workspace
Start now Project Management PSA
Create your ERP.AI account and get started with Proto.