Every account has exactly one role. It decides both what appears in the navigation and which people’s data is in scope.
Signing in requires the Supervisor role or higher. A standard user who tries is refused, which is the reason for Supervisors who need two accounts.
What each role sees
Standard is a tracked employee. The account exists so the desktop client can sign in and activity can be attributed to a person. It is not a login.
Supervisor is read only. They can see the numbers for their groups and export them. They cannot create or edit users, change groups, edit the corporate list or change any organisation setting.
A supervisor’s scope is the groups on their account, and it includes everything underneath them. Assign a supervisor to Athens and they see every team inside Athens. Assign them to Athens > Team Aurora and they see only that team.
Assign a supervisor to one group. If more than one group is set on the account, the filter requires a person to be in all of them at once, so the supervisor typically sees nobody. If somebody needs two unrelated teams, assign them the nearest common parent group instead.
Enterprise Admin is the day to day administrator: users, groups, versions, the corporate list, plans, exports and organisation settings, for their organisation only.
Super Admin is us. The difference that matters to you is that a super admin is not tied to one organisation, so on screens where an admin sees their organisation automatically, a super admin has to choose it from a dropdown.
Create administrators as Enterprise Admin, not Super Admin. A super admin creating a user must pick the organisation by hand, and if they forget, the account is saved without one. Such an account is invisible to every organisation-scoped admin and its client cannot sign in, because the client refuses an account with no organisation. This has happened, and it produces users who exist, cannot be found, and block the email address from being reused.
Changing a role
Edit the user in Workforce and change Role. Two rules apply:
- You cannot set a role higher than your own.
- Changing a role changes which fields apply. The tracking, single sign-on, lock and working schedule fields only mean anything for a standard user, so they are hidden for supervisors and admins.
Moving somebody from Standard to Supervisor is usually the wrong move on its own. If they should still be tracked, they need two accounts. See Supervisors who need two accounts.
Checked against ReclaimTime client 8.0.0.9 and dashboard V3 on 5 September 2026.