Roles: owner, admin, manager, member.

Access in TimeNova narrows by role, and the narrowing is enforced where the data lives, not in the buttons.

The four roles

Owner: everything, including billing and ownership transfer. There is exactly one, and ownership moves only to an existing admin, deliberately in two steps. Admin: everything except transferring ownership. Manager: their own group's people and reports. Member: themselves.

What managers may do

Four company-level switches decide whether managers can create projects, invite people, set ratings and set schedules. When a manager is refused, the refusal names the setting responsible, so nothing feels arbitrary.

Seeing your own data

Anyone using the desktop app always sees their own tracked day, whatever their role, and no setting removes that. For people tracked by the silent agent, whether they get a login and self-view is the company's choice in Settings.

The activity log

Every consequential admin change, capture modes, roles, privacy switches, schedules, lands in Settings, Activity log, written at the moment of the change and not editable afterwards.