User Roles and Data Access

The Trimble Construction One user role controls what the user can see and do in Viewpoint Team™, Trimble Construction One Analytics™, Viewpoint HR Management™, or Automatic Invoicing, and whether or not a user can access the Admin Center.

See the following sections for details on each user setting:

Enterprise Roles

Project Communication Roles

Analytics Roles

Analytics Features

Data Access

HR Management Roles

Accounts Payable Roles

Enterprise Roles

The Enterprise Role determines who has the Enterprise Admin level of access.

RoleDescription
UserMost users have this access level. Contacts who are invited to create a login are given this access level. These users cannot access the Admin Center.
Note: This setting alone does not provide access to Team. To work in Team, users must also have a Project Comm. role of User, Reviewer, or Admin.
Enterprise Admin

These users can access the Admin Center and modify other users and system settings.

This access should be limited to trusted individuals within your own organization.

For Team, these users can assign a Project Manager to a project.

For the Employee Self-Service module of HR Management, these users can perform the same administrative tasks as HR admins.

Project Communication Roles

The Project Communication (Project Comm.) role determines what a user can see and do in Team.

Note: To work in Team, a user must have a Project Communication role of User, Reviewer, or Admin. A user set to None will not be able to access to Team.
RoleDescription
UserMost users have this access level. This allows them to work in Team. Contacts who are invited to create a login are given this access level.
ReviewerReviewers can be invited to Team projects for review-only purposes. They can view all work items, and comment on those work items, but cannot edit anything.
AdminIn addition to working in Team, these users can add, manage, and delete projects.

They can also assign a Project Manager to a project.

Note: This setting does not provide access to the Admin Center. To access the Admin Center Team, a user must have an Enterprise Role of Enterprise Admin.

Analytics Roles

The Analytics role determines what a user can see or do in Trimble Construction One Analytics.

RoleDescription
UserMost users have this access level.

For Team Reporting, this access level allows one to work in Trimble Construction One Analytics and create, edit, and delete reports in the My Reports folder, or copy and save reports to the My Reports folder. However, users with this access level cannot edit, rename, delete, or save to the Public Reports folder. Contacts who are invited to create a log-in are given this access level.

For Paginated Reports and Dashboards, user permissions are defined by the Permissions Group to which a user is assigned. For more details, see Access Levels for Permission Groups.
ReviewerFor Team Reporting, Reviewers have read-only access to standard and public reports, and no other permissions. They can view reports but cannot edit anything.

For Paginated Reports and Dashboards, permissions are defined by the Permissions Group to which a user is assigned. For more details, see Access Levels for Permission Groups.

AdminFor Team Reporting, in addition to working in Trimble Construction One Analytics with reports in the My Reports folder, these users can edit, rename, delete, and copy public reports, and save to the Public Reports folder.
Note: This setting does not provide access to the Admin Center. To access the Admin Center, a user must have an Enterprise Role of Enterprise Admin.

For Paginated Reports and Dashboards, Admins have full permissions to view, create, edit, and delete reports, tags, and permission groups.

Analytics Features

The Analytics Features setting determines what features the user can access in Trimble Construction One Analytics. For details about the different features see About Trimble Construction One Analytics.

FeatureDescription
Team ReportingTeam Reporting is enabled by default. With Team Reporting you can access Standard Reports for and create custom reports for your projects. Team Reporting does not require an Analytics license.
DashboardsDashboards in Trimble Construction One Analytics provide detailed visualizations of your ERP data (Vista and Spectrum). The Dashboards feature requires an Analytics license.
Vista ReportsVista Reports provide access to your Vista Crystal Reports on the web from Trimble Construction One Analytics without opening Vista. The Vista Reports feature requires an Analytics license.
Paginated ReportsPaginated Reports in Trimble Construction One Analytics enable you to view and share reports for data in Vista and Vista Web without accessing those applications directly. Paginated Reports requires an Analytics license.

Data Access

The Data Access setting determines the data a user can access when using Team Reporting in Trimble Construction One Analytics. This field is only active when a user has been assigned an Analytics role other than None, and has been given access to the Team Reporting feature.

By default, users with an Analytics role and Team Reporting can access data from the Team projects to which they’re invited.

Note: For a user with an Analytics role and Team Reporting, if the Data Access field is empty, that user has the default level of data access. Also, you cannot remove access to data from invited Team projects.

Additional data access options vary according to whether your ERP is Vista or Spectrum. See the following table that applies to your ERP.

Table 1. Spectrum Data Access Options
Data Access FieldDescription
EmptyThe user has the default level of access and can access data from the Team projects to which they’re invited.
Selected Business UnitsSelect one or more business units to give the user access to data from those business units.

At this time, for enterprises with Spectrum, this option provides data only for projects that are available in Team.

Table 2. Vista Data Access Options
Data Access FieldDescription
EmptyThe user has the default level of access and can access data from the Team projects to which they’re invited.
Selected Business UnitsSelect one or more business units to give the user access to data from those business units. For Vista, this includes access to data from all Vista projects in those business units, including projects, which have not been added to Team.
Note: For Vista projects that are not in Team, Trimble Construction One Analytics displays only projects with a Contract Start Date that falls within the last five years.
All Projects (includes ERP)(For Vista only) Select this option to give a user access to data from all Vista projects in your enterprise, including projects, which have not been added to Team.
Note: For Vista projects that are not in Team, Trimble Construction One Analytics displays only projects with a Contract Start Date that falls within the last five years.

HR Management Roles

The HR Management role determines what a user can do in HR Management for Spectrum.

RoleDescription
AdminIn addition to working in Onboarding and Employee Self-Service, these users can create and assign HR specialist permissions.
Note: This setting does not provide access to the Admin Center. To access the Admin Center, a user must have an Enterprise Role of Enterprise Admin.
SpecialistMost HR team members have this access level. This allows them to work in Onboarding and Employee Self-Service. Contacts who are invited to create a login are given this access level.
Important: HR Specialists must be assigned to a profile group in Onboarding or a permission group in Employee Self-Service in order to see any information after logging in.
NoneEmployee users whose accounts have been migrated to Trimble Construction One should have this role. These users require specific security setup before their accounts can be migrated. See Migrate Spectrum Operators to Trimble Construction One (Trimble ID) for details.

Accounts Payable Roles

The Accounts Payable role determines whether or not a user can access Automatic Invoicing, and other permissions regarding batches.

RoleDescription
UserThe User can access Automatic Invoicing.
NoneNo access to Automatic Invoicing.
AdminThe Admin can access Automatic Invoicing and delete batches created by any user in the Enterprise. Whereas, Users can only delete the batches they created.

The Admin can also add an account to the Inbox.