User permissions

Updated on September 23, 2026

The team grew and the administrator no longer needs to be the only person who “can do everything”. At the same time, it does not make sense for every manager to see cost, billing, and everyone else’s hours. In Rabbiit, promotion is individual: you choose the person’s role and, for a superuser, you turn on only what that person needs to do.

Before, the old model defined what everyone with a given role could do — every superuser had the same level. Now you can give autonomy to coordinators, project managers, and finance without opening the entire account.

💡 Plan: on the free plan there are administrator and regular user. Superuser and the extra permissions per person are part of advanced permissions on paid plans (Business and Ultimate).

The four account roles

The “team manager” role no longer exists. Anyone who needs to follow a group becomes a superuser, receives assigned people, and, if it makes sense, extra permissions.

Regular user — logs their own hours and joins the projects they are a member of.
Superuser — by default sees their own hours and joins projects. You can promote them person by person (about 11 or 12 permissions) and make them a project manager.
Administrator — does everything in account operations: people, projects, reports, settings, and other people’s permissions.
Account owner — is an administrator and, in addition, is the only one who changes the subscription plan and can delete the account.

The owner is not a fifth role in the selector: it is the administrator who created the account. That status cannot be revoked by another administrator.

Regular user

User modal, Permissions tab, with Regular User selected

This is the collaborator who logs hours. Ideal for someone who does not manage a project or a team.

Can

Create and edit only their own hours.
See only their own hours in reports.
Access public projects and the projects they are a member of.
Collaborate on activities in those projects.

Cannot

Be promoted to project manager — a regular user does not become a project manager.
Invite people, edit users, or change permissions.
Create a project, manage clients, or manage account tasks.
See other people’s time entries, user cost, or billing amounts.

If the person needs to follow a team or a project, change the role to superuser — do not try to “stretch” the regular user.

Superuser

This is the intermediate role. By default they do not inherit the old “almost administrator” power. They start lean and you promote what is missing.

By default the superuser can

Access only projects they are a member of or public projects.
Create and edit only their own hours.
See other people’s hours in reports — of people assigned to them or of projects where they are the project manager.
See, in the user list, only assigned people.

By default they cannot

Create a project or edit project settings.
Invite or edit users.
Log hours for other people.
See or edit cost, billing amounts, or mark time entries as billed.
Approve the week’s hours.
Change account settings, other people’s permissions, or the plan.

The administrator turns these actions on in that person’s Permissions tab — not for the entire role.

Superuser extra permissions

User modal, Permissions tab, with Super User and the extra permissions

When you edit the user, Permissions tab, the checkboxes appear in three groups. Turn on only what that person needs. Another superuser in the same account can have a different set.

Administrative

Create projects and edit settings of projects they manage — creates a project and manages projects where they were promoted to manager.
Create and edit all clients in the account — manage clients for the account, not only for one project.
Create and edit all tasks in the account — manage tasks in the account catalog.

Manage people

These actions apply to the people assigned to the superuser (People tab). Without an assignment, the permission exists on the role, but there is no one to apply it to.

Invite users and edit users they are assigned to
Create and edit users’ hours — for assigned people (other people’s time entries)
See and edit users’ internal cost — for assigned people (edit cost / cost per hour)
See internal cost amounts in reports — for assigned people (view cost)
Approve or reject submitted hours — appears when the account uses hour approvals. The superuser still needs to be that person’s manager/approver.

Project billing

See and edit the billing amount — for projects they manage (edit billing amounts)
See billing amounts in reports — for assigned people
See billing amounts in reports — for projects they manage (project billing amounts)
Mark entries as billed or not billed (billed status)

A team coordinator usually gets assigned people + permission to log hours for assigned people. A project manager usually gets the promotion on the project + create/edit those projects + , if finance asks, view billing amounts only from there. A finance analyst can see billing and cost without being able to invite anyone.

Assigned people

In the old model, a “team manager” saw the same slice for everyone with that role. Now the administrator chooses who each superuser follows.

The step-by-step for the tab (people, teams, assign all, automatic) is in how to assign people to users. In short:

Open Users, edit the superuser, and go to the People tab.
Assign individual people or entire teams.
If you want, turn on automatic assignment for anyone who joins the account later.

With that, the superuser starts seeing those people’s entries in reports. Extra permissions to invite, edit, log hours, or see cost only apply to that slice — not to the entire account.

Only the administrator changes these assignments.

Project manager

Besides the account role, a project has member and project manager.

Member — joins the project, logs their own hours, and collaborates on activities.
Project manager — on the project where they were promoted, they see other users’ hours and, if they have the extra permission to create/edit projects, they adjust that project’s settings, members, and tasks.

Rules that changed:

A regular user cannot be a project manager. The option stays locked.
A superuser can be promoted to manager on one or more projects — project by project, not “manager of everything”.
The administrator promotes from the project people list or from the user’s Projects tab.

Being a manager without the extra permission to create/edit projects still helps see that project’s slice in reports. To change the project settings, also turn on that extra permission.

Administrator

User modal, Permissions tab, with Administrator selected

Runs the full account operation: all users, all projects (including private ones), anyone’s time entries, clients, tasks, billing amounts, user cost, billed status, date lock, custom fields, account settings, other people’s permissions, and each superuser’s assigned people.

They also approve the week’s hours and define who else can approve.

Does not do — only the owner changes the subscription plan, the payment method in the sense of managing the subscription, and deletes the account. No administrator archives or deletes the owner.

Account owner

Has everything the administrator has and, only they:

Manage the subscription and change the account plan.
Delete the account.

Another administrator does not demote or change the owner’s permission.

How to configure

Open Users and edit the person.
On the Permissions tab, choose Regular user, Superuser, or Administrator.
If they are a superuser, turn on that person’s extra permissions.
On the People tab, assign who they can follow.
On projects, promote them to manager only where they actually coordinate the work.

The person themselves can check what they received in My permissions (in the account profile): role, extras turned on, assigned people, and projects where they are manager.

Only an administrator edits another user’s permission. The owner’s permission does not change.

When to use each combination

Small team, everyone trusted — a few administrators and the rest regular users. Superuser only comes in when someone needs to see other people’s hours without becoming an admin.

Coordinator of a team — superuser + assigned people. Turn on logging hours for assigned people if they correct the team’s timesheet. Do not turn on billing if they do not invoice.

Manager of one or two clients — superuser + manager on those projects + permission to create/edit those projects. Billing amounts only if they close the invoicing.

Finance — superuser with view billing amounts, user cost, and mark time entries as billed. No user invites, unless they also take care of the team.

Partner or account operations — administrator. The owner stays with whoever actually changes the plan.

Approve the week’s hours

Approving hours is not a role. It is a superuser extra permission (and the administrator already can). The person still needs to be that collaborator’s manager/approver.

Who logs hours follows how to submit hours for approval. Who validates follows how to approve submitted hours.

Frequently asked questions

What happened to the team manager? It is no longer a role. The people slice is now the superuser’s People tab, with individual extra permissions.

Can I give different powers to two superusers? Yes. That is the point of the new model: person by person, not “every superuser does the same thing”.

Can a regular user be a project manager? No. Promote them to superuser and only then mark them as manager on that project.

Who invites new users? The administrator. A superuser only invites if they receive the permission to invite and edit assigned users.

Who changes the plan? Only the account owner.

How do I see my permissions? Profile menu → Profile and preferences → in the left menu, Permissions and assignments. There you see the role, the manager, the extras turned on, the assigned people, and the projects where you are manager. The slice for someone who only logs hours is in what a member can and cannot do.