Access to all features added to JIRA by ictime can be restricted via permissions on JIRA group level. There are no fixed roles in ictime, but we have already defined default JIRA groups for each ictime permission, so that you automatically get a running configuration in case you use the JIRA groups "jira-administrators" and "jira-developers" in your JIRA installation.

Default ictime Permission Setup

ictime offers a detailed and flexible permission management and does not limit administrative actions to JIRA administrators. In order to offer you a working permission configuration directly after installation, ictime uses the following JIRA groups:

jira-developers
jira-administrators

These groups exist by default in JIRA, see https://confluence.atlassian.com/display/JIRA/Managing+Groups. All ictime permissions are assigned to one of these two groups. You are free to change the configuration at any time, please see below for details.

There are a couple of use case scenarios where this default setup won't work, i.e. you won't be able to access all ictime navigation items (or won't see any ictime navigation at all):

If the JIRA groups jira-developers and jira-administrators do not exist in your JIRA installation.
If your user is not assigned to one of this groups (specifically to jira-administrators in order to have full access to ictime administration options)
If you accidentally have configured ictime permissions in a way that you can't access the ictime permissions screen any longer.

In these cases proceed according to one of the following recommendations:

If the JIRA groups do not exist (possible reasons for this could be that you work with LDAP or that you did an import from an OnDemand instance, in JIRA OnDemand, these groups are called "administrators" and "developers" without the "jira-" prefix), create a new group in JIRA with the name "ictime-lifesaver". Assign yourself to this group. You will now get access to the ictime "Permissions" screen and can set the permissions in accordance with your needs.
If the JIRA groups exist, but you are not assigned, assign yourself to the group "jira-administrators", if possible.
If you accidentally have configured ictime permissions in a way that you can't access the ictime permissions screen any longer, proceed like described under #1.

JIRA Configuration and Permissions for Time Tracking

As a base requirement to use ictime, time tracking needs to be activated in JIRA (see http://confluence.atlassian.com/display/JIRA/Configuring+Time+Tracking). In addition, a couple of permissions do not exist separately in ictime, but have to be configured in JIRA.The most important one is the permission to log work itself ("Work on Issues"). For details, please refer to JIRA Configuration & Permissions.

Configure ictime Permissions

Go to

ictime - Permissions - ictime

Permissions are always set on JIRA group level. You can select as many existing groups as you need. You can either directly enter the group name(s) or click on the group icon

and choose the groups in the JIRA group picker that opens as a separate window:

Once chosen the group(s), please click an the "Add" button to save your selection. If you have typed the group name manually and this group does not exist, it won't be saved.

The groups will be listed in the "Assigned" column of the interface. To delete groups you have assigned to a permission, use the respective link

Permissions

Timesheets & Time Tracking

Permission	Description	Remarks
My Timesheet (top level)	Access to your complete timesheet for all projects (see My Timesheet).	default group: jira-developers
My Work Log	Access to your work logs on issue level. This is the specific "My Work Log" tab in the "Activity" section of the issue screen (see Log Work (Issue Screen)).	default group: jira-developers
My Last Work Log Webpanel	See/use the My Last Work Log Webpanel in the right column of issue screen (see Log Work (Issue Screen))	default group: jira-developers
Log work for others	Permission to log time for other users. This functionality is only available in the log work screens you open from Timesheets (see Log Work (My Timesheet)). and directly from the JIRA navigation bar (see Log Work (JIRA Navigation)), but not in other log work or edit work log interfaces (see Log Work (Issue Screen)).	default group: jira-administrators
Log work from JIRA navigation bar	Permission to log work using the "Log work" option in the JIRA navigation bar (see Log Work (JIRA Navigation))	default group: jira-developers

Configuration

Permission	Description	Remarks
Global Teams	Create, edit and delete global teams (see Configure Global Teams & Price Lists).	default group: jira-administrators
Activity Types	Create, edit and delete activity types (see Configure Activity Types).	default group: jira-administrators
Rounding Rules	Create, edit and delete rounding rules (see Configure Rounding Rules).	default group: jira-administrators
Permissions	Configure permissions.	default group: jira-administrators
Project Configuration	See the complete ictime project list (regardless of your JIRA "browse project" permissions), set and edit project status, define the rounding rule for a project, add teams to projects, edit and delete teams, add price lists to teams, edit and delete price lists, create, edit and delete accounting information, configure activity type settings for a project, configure approval for a project (see Project Configuration).	default group: jira-administrators

Reporting/Accounting

Permission	Description	Remarks
Reporting	Access to the reporting interface, using all features of this interface, except for charging work logs and approval (see Reporting).	default group: jira-administrators Please note that users can also get access to Reporting (with full or limited functionality) if they are assigned as approval managers to a project (see Project Approval Managers).
Accounting	Access to the accounting interface and permission to charge work logs as part of the reporting interface (see Accounting).	default group: jira-administrators

Planning

Permission	Description	Remarks
Planning	Permission to use planning sheet (view, edit), see Planning Sheet.	default group: jira-administrators
Plan/Actual	Permission to use the plan/actual sheet (see Plan-Actual Comparison).	default group: jira-administrators

Approval

Permissions for a user to approve work logs are not managed here, but you automatically get these permissions when you are selected as an approval manager for a project. Please refer to Project Approval Managers and Approval.

Browser not supported