Roles and permissions
Each person has exactly one role within their company.
| Role | May |
|---|---|
| Employee | clock and view their own times, make their own requests, download their own data |
| Manager (team lead) | additionally: see times and accounts of the teams they lead; decide on requests of these teams; plan shifts of these teams and approve swaps |
| Admin | everything in their own company: people, teams, settings, editing entries, month closing, log, integrations |
| Auditor | reads everything in the company including the log, changes nothing and does not clock – e.g. for tax advisers or audits |
In addition there is the installation-wide super admin: they create and suspend companies and switch features per company.
Who is a team lead?
Team leads are set by an admin under Teams. A person with the role "Manager" only sees the teams they lead, and themselves.
Changes to entries
Admins may add, change or delete entries – always with a reason. Every change remains visible as a version in the history and is chained, so changes made outside Punchify can be detected (see privacy and security).
Protection rules
Only admins see protection rules (minors, maternity protection). Managers only see the neutral notice "protection rule" in reports, not which one applies.