Roles and permissions

Project and practice scope is enforced on records, APIs and exports. Resource users see their own delivery context. Protected CostRate is Finance-owned; independent staffing and rate decisions cannot be supplied by Admin configuration rights.

Permissions

Summarised from the authored role permissions. Scope restrictions such as “own records” still apply; these symbols do not indicate completeness or runtime access.

TableResource ManagerProject ManagerResourceSales EngineerFinanceViewerPractice Lead
master
ResourcesNo table-specific permission statedNo table-specific permission statedNo table-specific permission statedNo table-specific permission stated Manage / maintain: Maintain only the protected Resources.CostRate input with effective evidenceNo table-specific permission stated View: View assigned Practices, Resources and scoped capacity/bench reports with CostRate masked
PracticesNo table-specific permission statedNo table-specific permission statedNo table-specific permission statedNo table-specific permission statedNo table-specific permission statedNo table-specific permission stated View: View assigned Practices, Resources and scoped capacity/bench reports with CostRate masked
transaction
ResourceRequests Specific actions: Approve ResourceRequests (PendingApproval → Approved)No table-specific permission statedNo table-specific permission statedNo table-specific permission statedNo table-specific permission statedNo table-specific permission statedNo table-specific permission stated
  • Project ManagerBillRate and CostRate masked) for the staffing searchResource Manager approves)
  • ResourceCannot see any other Resource's row, rates, assignments, or utilization
  • Sales EngineerNo write anywhere
  • FinanceCannot approve own RateCard changes (must pair with a Practice Lead approval)
  • ViewerNo write anywhere
  • Practice LeadCo-approve a rate revision independently of its preparer and the Finance signerNo self-approval, project staffing bypass or direct actuals edits
Manage / maintain View Specific actions— No table-specific permission statedPermissions also apply to agents

The roles

Resource Manager

Owns the demand-supply marketplace for one or more Practices. Sole authority to approve ResourceRequests for own Practice, match a Resource, create the Assignment, intake Substitutions, and clear Bench rows.

Permissions and screens
  • CRUD on Resources (own Practice, including BillRate
  • CostRate remains Finance-owned), ResourceSkills and SkillCertifications for own Practice's Resources (verify), ResourceRequests (own Practice, approve / reject / match), Assignments (own Practice, create / extend / end / cancel), AssignmentPeriods, Substitutions (intake and approve), and Bench (annotate and clear)
  • Read on Skills, Practices, Roles, RateCards, RateCardRows, WeeklyCapacity, PTOImports, Utilization (all Practices for cross-Practice borrowing)
  • Approve ResourceRequests (PendingApproval → Approved)
  • Cannot edit RateCards (MDM) or system-wide masters
Pending Resource RequestsPendingApproval
Request NumberProjectRole NeededStart Date
Staffing Request BoardSubmitted
Request NumberProjectRole NeededMatched Resource
Bench (Practice scoped)Active
ResourcePracticeFlagged AtForward Window Weeks
Project Manager

Project owner — files ResourceRequests for own projects, sees Assignments staffed against own projects, requests Substitutions, and consumes the staffed team into the pm-projects workspace. No write on Resources or Skills catalog.

Permissions and screens
  • CRUD on ResourceRequests where RequestedBy = self AND Status IN (Draft, Submitted)
  • Read on Resources (FullName, Practice, PrimaryRole, Location
  • BillRate and CostRate masked) for the staffing search
  • Read on Skills, ResourceSkills (own project's suggested matches), Roles, Practices, WeeklyCapacity (filtered to candidates for own open requests), Assignments where Project IN (own projects), AssignmentPeriods where Assignment.Project IN (own projects)
  • Propose Substitutions (creates Status=Proposed
  • Resource Manager approves)
  • Cannot approve own ResourceRequests, edit Assignments directly, or see Utilization across the org
Open Requests for My ProjectsDraft
Request NumberProjectRole NeededStart Date
Staffing Request BoardSubmitted
Request NumberProjectRole NeededMatched Resource
Assignment CalendarActive
Assignment NumberResourceProjectStart Date
Resource

The staffed person. Self-service on own Skills profile and read-only on own Assignments. Cannot see other Resources' rates, costs, or assignments.

Permissions and screens
  • Read on own Resources row (BillRate, CostRate masked)
  • CRUD on own ResourceSkills (subject to Manager attestation before Source: SelfReported → ManagerAttested) and own SkillCertifications (subject to verification before Status: PendingVerify → Active)
  • Read on own Assignments, AssignmentPeriods, WeeklyCapacity, PTOImports, Utilization
  • Read on Skills, Roles, Practices catalogs
  • Cannot see any other Resource's row, rates, assignments, or utilization
My AssignmentsActive
Assignment NumberProjectRoleStart Date
Assignment CalendarActive
Assignment NumberResourceProjectStart Date
Certifications Expiring (next 90 days)Active
Resource SkillCertification NameIssuerIssued At
Sales Engineer

Pre-sales staffing planner. Read-only on capacity and skill inventory to scope opportunities — "do we have three Snowflake-fluent Senior Engineers free in the West region in Q3?" Cannot create Assignments or modify Resources.

Permissions and screens
  • Read on Resources (FullName, Practice, PrimaryRole, Location, ResourceType
  • BillRate and CostRate masked), Skills, ResourceSkills (no individual proficiency edits), Practices, Roles, RateCards, RateCardRows (BillRate visible for opportunity quoting), WeeklyCapacity (forward-looking), and Utilization (org-wide rollups)
  • No write anywhere
  • Can run skill-match queries for opportunities not yet booked as Projects, but cannot file ResourceRequests (that requires a real Project)
Forward Capacity (next 8 weeks)
ResourceWeek StartBase HoursPTOHours
Skill SearchActive
ResourceResource PracticeResource Primary RoleResource Location
Active RateCardsActive
Rate Card CodePracticeRegionEffective From
Southeast
Finance

Owns revenue forecasting from forward-booked Assignments and the financial integrity of RateCards. Co-approver on RateCard activation alongside the Practice Lead.

Permissions and screens
  • Read on all Resources (including BillRate and CostRate), Roles (DefaultBillRate visible), Assignments, AssignmentPeriods, Utilization
  • CRUD on RateCards and RateCardRows for Finance approval (FinanceApprovedBy and FinanceApprovedAt stamping)
  • Read on ResourceRequests, WeeklyCapacity, Bench
  • Maintain only the protected Resources.CostRate input with effective evidence
  • no other Resources edits and no write on Assignments or Skills catalog
  • Cannot approve own RateCard changes (must pair with a Practice Lead approval)
Forward-Booked Revenue (next quarter)Active
ResourceAssignment ProjectWeek StartAllocation Hours
Active RateCardsActive
Rate Card CodePracticeRegionEffective From
Southeast
Viewer

Executive read-only on org-wide Utilization and Bench. Used by the CEO, COO, and PMO Lead for the quarterly headline ("utilization is 74% across delivery"). No personally identifying detail beyond Resource FullName.

Permissions and screens
  • Read on Utilization (org-wide rollups only
  • individual rows aggregated to Practice / Region), Bench (count and Practice rollup), Practices, and Roles catalogs
  • Aggregated read on Assignments (Practice-level hours, no per-Resource detail)
  • Field-level masking on all Resources.BillRate, Resources.CostRate, Roles.DefaultBillRate
  • No write anywhere
  • No access to ResourceSkills, SkillCertifications, ResourceRequests, RateCardRows, or AssignmentPeriods
Practice Lead

Owns rate-policy review and resource planning priorities within assigned practices.

Permissions and screens
  • View assigned Practices, Resources and scoped capacity/bench reports with CostRate masked
  • Review RateCards and RateCardRows
  • Co-approve a rate revision independently of its preparer and the Finance signer
  • No self-approval, project staffing bypass or direct actuals edits

How permissions work

Project and practice scope is enforced on records, APIs and exports. Resource users see their own delivery context. Protected CostRate is Finance-owned; independent staffing and rate decisions cannot be supplied by Admin configuration rights.

ERP•AI workspace

Start now Resource Planning System

Create your ERP.AI account and get started with Proto.

Start now Download agent

Customize Resource Planning System. With Proto, your desktop AI agent.

Ask Proto to help you customize Resource Planning System.

Customize
Resource Planning System. Ask: “Adapt People and skills.” ProtoYour desktop AI agent
Download nowFree install · ~1 GB · AI usage extra