User Roles and Data Access
The Trimble Construction One user role controls what the user can see and do in Viewpoint Team™, Viewpoint Analytics™, Viewpoint HR Management™, or Automatic Invoicing, and whether or not a user can access the Admin Center.
See the following sections for details on each user setting:
Enterprise Roles
The Enterprise Role determines who has the Enterprise Admin level of access.
| Role | Description |
|---|---|
| User | Most users have this access level.
Contacts who are invited to create a login are given this access
level. These users cannot access the Admin Center. Note: This setting alone does not provide
access to Team. To work in Team, users
must also have a Project Comm. role of User, Reviewer, or
Admin.
|
| Enterprise Admin | These users can access the Admin Center and modify other users
and system settings. They can also assign a Project Manager to a project. This access should be limited to trusted individuals within your own organization. |
Project Communication Roles
The Project Communication (Project Comm.) role determines what a user can see and do in Team.
| Role | Description |
|---|---|
| User | Most users have this access level. This allows them to work in Team. Contacts who are invited to create a login are given this access level. |
| Reviewer | Reviewers can be invited to Team projects for review-only purposes. They can view all work items, and comment on those work items, but cannot edit anything. |
| Admin | In addition to working in Team, these users can add, manage, and delete
projects. They can also assign a Project Manager to a project. Note: This setting does not
provide access to the Admin Center. To access the Admin Center
Team, a user
must have an Enterprise Role of Enterprise Admin. |
Analytics Roles
The Analytics role determines what a user can see or do in Viewpoint Analytics.
| Role | Description |
|---|---|
| User | Most users have this access level. This allows them to work in Viewpoint Analytics and create, edit, and delete reports in the My Reports folder, or copy and save reports to the My Reports folder. However, users with this access level cannot edit, rename, delete, or save to the Public Reports folder. Contacts who are invited to create a log-in are given this access level. |
| Reviewer | Reviewers have read-only access to standard and public reports, and no other permissions. They can view reports but cannot edit anything. |
| Admin | In addition to working in Viewpoint
Analytics with reports in
the My Reports folder, these users can edit, rename, delete, and
copy public reports, and save to the Public Reports folder.
Note: This setting does not provide
access to the Admin Center. To access the Admin Center, a
user must have an Enterprise Role of Enterprise
Admin. |
Analytics Features
The Analytics Features setting determines what features the user can access in Viewpoint Analytics. For details about the different features see About Viewpoint Analytics.
| Feature | Description |
|---|---|
| Team Reporting | Team Reporting is enabled by default. With Team Reporting you can access Standard Reports for and create custom reports for your projects. Team Reporting does not require an Anlytics license. |
| Dashboards | Dashboards in Viewpoint Analytics provide visualizations of key project data for your Vista projects. The Dashboards feature requires an Analytics license. |
| Vista Reports | Vista Reports provide access to your Vista Crystal Reports on the web from Viewpoint Analytics without opening Vista. The Vista Reports feature requires an Analytics license. |
Data Access
The Data Access setting determines the data a user can access when using Team Reporting in Viewpoint Analytics. This field is only active when a user has been assigned an Analytics role other than None, and has been given access to the Team Reporting feature.
By default, users with an Analytics role and Team Reporting can access data from the Team projects to which they’re invited.
Additional data access options vary according to whether your ERP is Vista or Spectrum. See the following table that applies to your ERP.
| Data Access Field | Description |
|---|---|
| Empty | The user has the default level of access and can access data from the Team projects to which they’re invited. |
| Selected Business Units | Select one or more business units to give
the user access to data from those business units. At this time, for enterprises with Spectrum, this option provides data only for projects that are available in Team. |
| Data Access Field | Description |
|---|---|
| Empty | The user has the default level of access and can access data from the Team projects to which they’re invited. |
| Selected Business Units | Select one or more business units to give the user access to
data from those business units. For Vista, this includes access to data from
all Vista projects in
those business units, including projects, which have not been added
to Team. Note: For Vista projects that are not in Team,
Viewpoint
Analytics
displays only projects with a Contract Start Date that falls
within the last five years. |
| All Projects (includes ERP) | (For Vista only)
Select this option to give a user access to data from all Vista projects in your
enterprise, including projects, which have not been added to
Team. Note: For Vista projects that are not in Team,
Viewpoint
Analytics
displays only projects with a Contract Start Date that falls
within the last five years. |
HR Management Roles
The HR Management role determines what a user can do in HR Management for Spectrum.
| Role | Description |
|---|---|
| Specialist | Most HR team members have this access level. This allows them
to work in Onboarding and Employee
Self-Service. Contacts who are invited
to create a login are given this access level. Important: HR Specialists must
be assigned to a profile group in Onboarding or a permission group in
Employee
Self-Service in order to
see any information after logging in. |
| Admin | In addition to working in Onboarding and Employee
Self-Service, these users can create and
assign HR specialist permissions. Note: This setting does not provide access to the Admin Center.
To access the Admin Center, a user must have an Enterprise
Role of Enterprise Admin. |
| None | Employee users whose accounts have been migrated to Trimble Construction One should have this role. These users require specific security setup before their accounts can be migrated. See Migrate Spectrum Operators to Trimble Construction One (Trimble ID) for details. |
Accounts Payable Roles
The Accounts Payable role determines whether or not a user can access Automatic Invoicing, and other permissions regarding batches.
| Role | Description |
|---|---|
| User | The User can access Automatic Invoicing. |
| None | No access to Automatic Invoicing. |
| Admin | The Admin can access Automatic Invoicing and delete batches
created by any user in the Enterprise. Whereas, Users can only
delete the batches they created. The Admin can also add an account to the Inbox. |
