Privileges - who can access what in Hiro

• Can customise invoice due dates for contacts in the Address Book
• Can view/modify BSB, account numbers and BPAY customer references for contacts in the Address Book

Can generate ABN checking override codes on the Override Codes page.

Learn more about what ABN checking override codes are used for in this article.

By default, users are only able to view and download emails in the Email Archive if they are part of the project team for the project that email is tagged to.

Grant someone this privilege to enable them to retrieve any archived email, regardless of project.

Applies to the central Invoices workflow.

Allows users to:

• view invoices across all projects;
• create, edit and delete invoices before approval;
• approve and send invoices;
• apply payments; and
• view the company-wide invoice summary and chart.

Does not grant access to:

• the Invoices tab in View Project;
• Claims or Overall Up/Down; or
• other project information.

Project visibility is controlled separately.

By default, users can only access financial reporting data that is relevant to them.

For example:

• users can only retrieve invoicing data for projects they manage; and
• users can only retrieve timesheet data for their own timesheets or projects they manage.

Grant this privilege to allow someone to:

• view the company-wide invoice summary and chart on the Invoices page; and
• run the following financial reports across all company data:
  • Aged Receivables Report
  • Invoices Report
  • Projects Dashboard Report
  • Timesheets and Invoices Report
  • Timesheets per Day Summary Report
  • Timesheets Export
  • WIP Allocation Report

This privilege does not allow someone to approve or send invoices, or apply payments.

Access to the Licences and Training Register is entirely blocked unless granted this privilege.

Note that the ability to view/modify individual licence and training items assigned to staff is thereafter configured within that item's individual access permissions in the Register.

Learn more in this article.

Access to the Positions Register is limited for non-privileged users, where they can view basic position information including position descriptions.

The ability to add/modify positions and their associated position descriptions in the Positions Register is granted with this privilege.

Granting someone this privilege enables the ability to:

• access the Payroll Spreadsheet
• customise Payroll Hours and Cycles
• set up and configure Overtime Handling Methods
• set up and configure Leave Types
• customise User Document Types within Settings

Grants the ability to provision new plan numbers into provisioning pools in the Plan Register.

Learn more about plan provisioning in this article.

Grants the ability to allocate plan numbers onto projects in the Plan Register.

Learn more about plan allocation in this article.

Grants the ability to upload plan documents onto already allocated plan numbers within the Plan Register.

Learn more about plan uploading in this article.

Allows users to:

• edit any project’s details;
• add or remove project team members;
• create, open, edit and delete pre-approval invoices for any active job;
• manage project-tagged To-dos; and
• add or change project and contact call logs.

Does not grant:

• invoice approval, sending or payment processing
• broader visibility within View Project

View Project access remains separately controlled by project team membership, View full details across all projects, and Project invoice information access.

Accessing project information, such as timesheets, invoices and to-dos, is ordinarily restricted to members of that project's team.

This privilege overrides Project invoice information access, including when it is set to No-one.

By itself, this privilege does not allow users to edit projects or create, edit, approve, send or process invoices.

Regardless of project team membership, granting this privilege enables the ability to:

• access anyone's Project Dashboard using a dropdown people menu in the upper left corner:
  
  

• view project information such as to-dos, documents, timesheets, invoices and work schedules in the view project popup, which can be accessed by clicking on a project number or searching for it:
  
  

• view all project tagged To-dos

• run Projects Dashboard Export reports for anyone's projects

• run a Timesheets and Invoices Report for all projects

• view invoicing information with an Address Book Analysis Report

Controls who can see the following within View Project:

• the Invoices tab
• Claims
• Overall Up/Down

The setting can allow:

• Everyone
• Project team members
• Project captains only
• No-one

Global Administrators and users with View full details across all projects override the selected level. Edit all projects and Approve and process invoices do not.

By default, you can only use the Bulk Move Timesheets tool to move WIP timesheets onto a project that you are captain of.

Grant someone this privilege to enable moving timesheets:

• from/to any project; and
• that are already allocated to an invoice.

Learn more about the Bulk Move Timesheets tool in this article.

Existing timesheets can have their charge rates recalculated to match updated rates in:

• Positions Register, for whole of position rate changes
• User Accounts, for adjusting the charge rate on timesheets for a specific user
• Edit Project Details, for adjusting the charge rates for timesheets attached to a specific project

By default, backdating only applies to timesheets that are unallocated to an invoice (that is, those still in WIP status).

Granting this privilege enables a user to also backdate and recalculate rates for timesheets already allocated to an invoice.

Granting this privilege enables the ability to:

• View current and archived staff profiles across the organisation on the Staff page

  

• View emergency contact information on the Staff page

  

• Export organisation-wide staff information using the Staff Info spreadsheet on the Staff page

  

• Access the Service Milestones page and create, view and edit its linked To-dos

• Select inactive staff in Timesheets when their separate Timesheet permissions allow access

This privilege does not grant user-account management, curriculum vitae editing, Licences & Training access or general access to other people’s timesheets.

Organisation-wide Service milestone email reminders are configured separately under notifications.

This enables someone to modify two types of special properties on a day in Who's In?:

• Whether the day is a public holiday, and if so if that PH is for just a specific branch office (e.g., a Show Holiday)
• Whether the day is part of a close-down period – e.g., Christmas and New Year's.

You can learn more about configuring public holidays and close-down periods in this article.

By default, non-privileged users only see the name of someone who’s been marked as away in the Who’s In? calendar.

When you grant this privilege to someone, they can see the full details about someone being away – e.g., what type of leave they’re on, who approved the request, what date the request was approved, etc.

By default, leave requests are sent to the person assigned as the employee’s Manager on the User Accounts page. The Manager can approve or deny the request.

You can also configure Other leave approvers for an individual employee. These people can action the employee’s leave requests alongside their Manager. Learn more about configuring additional leave approval access.

Granting someone the View other managers’ pending approvals privilege gives them broader access. They can view, approve or deny pending leave requests for anyone in the organisation, regardless of whether they are the employee’s Manager or an Other leave approver.

This organisation-wide privilege is best suited to people who centrally administer leave requests.