Understanding User Roles and Permissions

Prodoscore has two user roles, each with distinct permissions and access levels. Understand the difference to assign the right role to each person.

Admin Role

Who should have this role: Managers, department heads, IT administrators, team leads, and anyone who needs to view team-wide data or configure system settings.

Permissions:

  • Dashboard Access: Full access to all dashboards (Attendance, Productivity, Apps & URLs, Activity, Alerts, Timeline, Wellness, Livestream, Goals, etc.)
  • Team Visibility: Can view data only for teams they are assigned to (unless they are a Global Admin)
  • User Management: Can add, edit, and deactivate users
  • Team Management: Can create teams, manage team members, and assign shifts/policies
  • Settings Access: Can configure alerts, shifts, breaks, productivity rules, and other system settings
  • Feature Access: Can enable/disable optional features (Screenshots, Livestream, Goals, etc.)
  • Reports: Can create and export all reports (Dynamic Report, Productivity Report, Attendance Report, etc.)
  • API Access: Can generate and use API tokens for programmatic access

Limitations:

  • Data is scoped to assigned teams (unless Global Admin)
  • Cannot view other admins' configurations (for security)
  • Cannot delete the account or remove their own admin access (prevent accidental lockout)

Best for: Managers managing teams of 5-100 people, IT admins, department heads, HR leaders.

Standard Role

Who should have this role: Individual contributors, employees, staff members with no management responsibilities.

Permissions:

  • Personal Dashboard: Can view their own Attendance data (punch times, shift compliance)
  • Productivity Data: Can view their own Productivity % and activity metrics
  • Apps & URLs: Can view their own app and website usage
  • Activity Log: Can see their own activity breakdown (active vs. idle time)
  • Wellness: Can see their own wellness status (healthy/overburdened/underutilized)
  • Projects: Can view and update tasks assigned to them
  • Goals: Can see their personal goals and progress toward achieving them
  • Profile:** Can edit their own profile information (email, phone, etc.)

Limitations:

  • Cannot view other employees' data
  • Cannot view team-wide analytics
  • Cannot access Settings or admin functions
  • Cannot create projects or manage other users
  • Cannot export reports

Best for: Individual contributors, employees with no management responsibilities.

Permission Matrix

Feature Admin Standard
View Team Dashboards
View Own Attendance
View Own Productivity
Access Settings
Manage Users
Create/Assign Tasks ✓ (own)
Export Reports

Assigning Roles

When adding or editing a user, set their role at Settings > User Management > Users > Add User (or Modify User). Select:

  • "Admin" — For managers and admins
  • "Standard" — For employees

The role can be changed anytime by editing the user and setting a new role.

Global Admins vs. Team Admins

Global Admin: An admin assigned to all teams or has full organization access (typically the account owner).

Team Admin: An admin assigned to one or more specific teams and sees data only for those teams.

Both have the same capabilities within their scope. Global Admins see all data; Team Admins see only their assigned teams.

Best Practices

Principle of Least Privilege: Assign the minimum role needed. Not everyone needs admin access. Reserve admin access for managers and IT staff.
Team Manager Role: When creating a team, designate one or more Team Managers (via the Members tab). Team Managers have Admin role but can only see their assigned team's data. This limits access and maintains privacy.
Regular Audits: Periodically review user roles and access. Deactivate accounts for employees who have left. Remove admin access from users no longer in management.

See How to Add and Manage Users for detailed user management instructions.