User Roles and Data Access

The Trimble Construction One user role controls what the user can see and do in Viewpoint Team™ Viewpoint Analytics™, or Viewpoint HR Management™ and whether or not a user can access the Admin Center.

See the following sections for details on each user setting:

Enterprise Roles

Project Communication Roles

Analytics Roles

Analytics Features

Data Access

HR Management Roles

Accounts Payable Roles

Enterprise Roles

The Enterprise Role determines who has the Enterprise Admin level of access.

Role Description
User Most users have this access level. Contacts who are invited to create a login are given this access level. These users cannot access the Admin Center.
Note: This setting alone does not provide access to Team. To work in Team, users must also have a Project Comm. role of User, Reviewer, or Admin.
Enterprise Admin These users can access the Admin Center and modify other users and system settings.

They can also assign a Project Manager to a project.

This access should be limited to trusted individuals within your own organization.

Project Communication Roles

The Project Communication (Project Comm.) role determines what a user can see and do in Team.

Note: To work in Team, a user must have a Project Communication role of User, Reviewer, or Admin. A user set to None will not be able to access to Team.
RoleDescription
UserMost users have this access level. This allows them to work in Team. Contacts who are invited to create a login are given this access level.
ReviewerReviewers can be invited to Team projects for review-only purposes. They can view all work items, and comment on those work items, but cannot edit anything.
AdminIn addition to working in Team, these users can add, manage, and delete projects.

They can also assign a Project Manager to a project.

Note: This setting does not provide access to the Admin Center. To access the Admin Center Team, a user must have an Enterprise Role of Enterprise Admin.

Analytics Roles

The Analytics role determines what a user can see or do in Viewpoint Analytics.

Role Description
User Most users have this access level. This allows them to work in Viewpoint Analytics and create, edit, and delete reports in the My Reports folder, or copy and save reports to the My Reports folder. However, users with this access level cannot edit, rename, delete, or save to the Public Reports folder. Contacts who are invited to create a log-in are given this access level.
Reviewer Reviewers have read-only access to standard and public reports, and no other permissions. They can view reports but cannot edit anything.
Admin In addition to working in Viewpoint Analytics with reports in the My Reports folder, these users can edit, rename, delete, and copy public reports, and save to the Public Reports folder.
Note: This setting does not provide access to the Admin Center. To access the Admin Center, a user must have an Enterprise Role of Enterprise Admin.

Analytics Features

The Analytics Features setting determines what features the user can access in Viewpoint Analytics. For details about the different features see About Viewpoint Analytics.

Feature Description
Team Reporting Team Reporting is enabled by default. With Team Reporting you can access Standard Reports for and create custom reports for your projects. Team Reporting does not require an Anlytics license.
Dashboards Dashboards in Viewpoint Analytics provide visualizations of key project data for your Vista projects. The Dashboards feature requires an Analytics license.
Vista Reports Vista Reports provide access to your Vista Crystal Reports on the web from Viewpoint Analytics without opening Vista. The Vista Reports feature requires an Analytics license.

Data Access

The Data Access setting determines the data a user can access when using Team Reporting in Viewpoint Analytics. This field is only active when a user has been assigned an Analytics role other than None, and has been given access to the Team Reporting feature.

By default, users with an Analytics role and Team Reporting can access data from the Team projects to which they’re invited.

Note: For a user with an Analytics role and Team Reporting, if the Data Access field is empty, that user has the default level of data access. Also, you cannot remove access to data from invited Team projects.

Additional data access options vary according to whether your ERP is Vista or Spectrum. See the following table that applies to your ERP.

Table 1. Spectrum Data Access Options
Data Access Field Description
Empty The user has the default level of access and can access data from the Team projects to which they’re invited.
Selected Business Units Select one or more business units to give the user access to data from those business units.

At this time, for enterprises with Spectrum, this option provides data only for projects that are available in Team.

Table 2. Vista Data Access Options
Data Access Field Description
Empty The user has the default level of access and can access data from the Team projects to which they’re invited.
Selected Business Units Select one or more business units to give the user access to data from those business units. For Vista, this includes access to data from all Vista projects in those business units, including projects, which have not been added to Team.
Note: For Vista projects that are not in Team, Viewpoint Analytics displays only projects with a Contract Start Date that falls within the last five years.
All Projects (includes ERP) (For Vista only) Select this option to give a user access to data from all Vista projects in your enterprise, including projects, which have not been added to Team.
Note: For Vista projects that are not in Team, Viewpoint Analytics displays only projects with a Contract Start Date that falls within the last five years.

HR Management Roles

The HR Management role determines what a user can do in HR Management for Spectrum.

Role Description
Specialist Most HR team members have this access level. This allows them to work in Onboarding and Employee Self-Service. Contacts who are invited to create a login are given this access level.
Important: HR Specialists must be assigned to a profile group in Onboarding or a permission group in Employee Self-Service in order to see any information after logging in.
Admin In addition to working in Onboarding and Employee Self-Service, these users can create and assign HR specialist permissions.
Note: This setting does not provide access to the Admin Center. To access the Admin Center, a user must have an Enterprise Role of Enterprise Admin.
None Employee users whose accounts have been migrated to Trimble Construction One have this role. These users require specific security setup before their accounts can be migrated. See Security Requirements for Employee Users for details.

Accounts Payable Roles

The Accounts Payable role determines whether or not a user can access Automatic Invoicing.

Role Description
User The user can access Automatic Invoicing.
None No access to Automatic Invoicing.