viewer reads · member logs and submits time · admin also decides approvals, locks pay periods and owns settings, keys, restore and this page.