User Roles and Data Access
The Trimble Construction One user role controls what the user can see and do in Viewpoint Team™, Viewpoint Analytics™, Viewpoint HR Management™, or Automatic Invoicing, and whether or not a user can access the Admin Center.
See the following sections for details on each user setting:
Enterprise Roles
The Enterprise Role determines who has the Enterprise Admin level of access.
| Role | Description |
|---|---|
| User | Most users have this access level. Contacts who are invited to create a login are given this access level. These users cannot access the Admin Center. Note: This setting alone does not provide access to Team. To work in Team, users must also have a Project Comm. role of User, Reviewer, or Admin. |
| Enterprise Admin |
These users can access the Admin Center and modify other users and system settings. This access should be limited to trusted individuals within your own organization. For Team, these users can assign a Project Manager to a project. For the Employee Self-Service module of HR Management, these users can perform the same administrative tasks as HR admins. |
Project Communication Roles
The Project Communication (Project Comm.) role determines what a user can see and do in Team.
| Role | Description |
|---|---|
| User | Most users have this access level. This allows them to work in Team. Contacts who are invited to create a login are given this access level. |
| Reviewer | Reviewers can be invited to Team projects for review-only purposes. They can view all work items, and comment on those work items, but cannot edit anything. |
| Admin | In addition to working in Team, these users can add, manage, and delete projects. They can also assign a Project Manager to a project. Note: This setting does not provide access to the Admin Center. To access the Admin Center Team, a user must have an Enterprise Role of Enterprise Admin. |
Analytics Roles
The Analytics role determines what a user can see or do in Viewpoint Analytics.
| Role | Description |
|---|---|
| User | Most users have this access level. For Team Reporting, this access level allows one to work in Viewpoint Analytics and create, edit, and delete reports in the My Reports folder, or copy and save reports to the My Reports folder. However, users with this access level cannot edit, rename, delete, or save to the Public Reports folder. Contacts who are invited to create a log-in are given this access level. For Paginated Reports and Dashboards, user permissions are defined by the Permissions Group to which a user is assigned. For more details, see Access Levels for Permission Groups. |
| Reviewer | For Team Reporting, Reviewers have read-only access to standard and public reports, and no other permissions. They can view reports but cannot edit anything. For Paginated Reports and Dashboards, permissions are defined by the Permissions Group to which a user is assigned. For more details, see Access Levels for Permission Groups. |
| Admin | For Team Reporting, in addition to working in Viewpoint Analytics with reports in the My Reports folder, these users can edit, rename, delete, and copy public reports, and save to the Public Reports folder. Note: This setting does not provide access to the Admin Center. To access the Admin Center, a user must have an Enterprise Role of Enterprise Admin. For Paginated Reports and Dashboards, Admins have full permissions to view, create, edit, and delete reports, tags, and permission groups. |
Analytics Features
The Analytics Features setting determines what features the user can access in Viewpoint Analytics. For details about the different features see About Viewpoint Analytics.
| Feature | Description |
|---|---|
| Team Reporting | Team Reporting is enabled by default. With Team Reporting you can access Standard Reports for and create custom reports for your projects. Team Reporting does not require an Analytics license. |
| Dashboards | Dashboards in Viewpoint Analytics provide detailed visualizations of your ERP data (Vista and Spectrum). The Dashboards feature requires an Analytics license. |
| Vista Reports | Vista Reports provide access to your Vista Crystal Reports on the web from Viewpoint Analytics without opening Vista. The Vista Reports feature requires an Analytics license. |
| Paginated Reports | Paginated Reports in Viewpoint Analytics enable you to view and share reports for data in Vista and Vista Web without accessing those application directly. Paginated Reports requires an Analytics license. |
Data Access
The Data Access setting determines the data a user can access when using Team Reporting in Viewpoint Analytics. This field is only active when a user has been assigned an Analytics role other than None, and has been given access to the Team Reporting feature.
By default, users with an Analytics role and Team Reporting can access data from the Team projects to which they’re invited.
Additional data access options vary according to whether your ERP is Vista or Spectrum. See the following table that applies to your ERP.
| Data Access Field | Description |
|---|---|
| Empty | The user has the default level of access and can access data from the Team projects to which they’re invited. |
| Selected Business Units | Select one or more business units to give the user access to data from those business units. At this time, for enterprises with Spectrum, this option provides data only for projects that are available in Team. |
| Data Access Field | Description |
|---|---|
| Empty | The user has the default level of access and can access data from the Team projects to which they’re invited. |
| Selected Business Units | Select one or more business units to give the user access to data from those business units. For Vista, this includes access to data from all Vista projects in those business units, including projects, which have not been added to Team. Note: For Vista projects that are not in Team, Viewpoint Analytics displays only projects with a Contract Start Date that falls within the last five years. |
| All Projects (includes ERP) | (For Vista only) Select this option to give a user access to data from all Vista projects in your enterprise, including projects, which have not been added to Team. Note: For Vista projects that are not in Team, Viewpoint Analytics displays only projects with a Contract Start Date that falls within the last five years. |
HR Management Roles
The HR Management role determines what a user can do in HR Management for Spectrum.
| Role | Description |
|---|---|
| Admin | In addition to working in Onboarding and Employee Self-Service, these users can create and assign HR specialist permissions. Note: This setting does not provide access to the Admin Center. To access the Admin Center, a user must have an Enterprise Role of Enterprise Admin. |
| Specialist | Most HR team members have this access level. This allows them to work in Onboarding and Employee Self-Service. Contacts who are invited to create a login are given this access level. Important: HR Specialists must be assigned to a profile group in Onboarding or a permission group in Employee Self-Service in order to see any information after logging in. |
| None | Employee users whose accounts have been migrated to Trimble Construction One should have this role. These users require specific security setup before their accounts can be migrated. See Migrate Spectrum Operators to Trimble Construction One (Trimble ID) for details. |
Accounts Payable Roles
The Accounts Payable role determines whether or not a user can access Automatic Invoicing, and other permissions regarding batches.
| Role | Description |
|---|---|
| User | The User can access Automatic Invoicing. |
| None | No access to Automatic Invoicing. |
| Admin | The Admin can access Automatic Invoicing and delete batches created by any user in the Enterprise. Whereas, Users can only delete the batches they created. The Admin can also add an account to the Inbox. |
