Users and teams
Availability:Permission: users.read
Users & teams is where membership is managed. It opens with users.read, a permission managers also hold.
A user appears in Timeora the first time they sign in with their Microsoft 365 account. The record carries the person’s identity from Microsoft Entra ID, the tenant they belong to and the role that decides their permissions.
Change a role
Section titled “Change a role”- Open Users & teams.
- Find the person in the list.
- Open the user and select the role they should hold.
- Save.
Changing a role takes effect on the person’s next request; they do not need to sign out. A user with no role cannot do anything beyond the mandatory basics, so always assign one.
Teams group people for team reports and team attendance. They are not Microsoft Teams channels — a Timeora team is an organisational grouping inside the tenant.
| Action | Permission |
|---|---|
| See teams | teams.read |
| Create a team | teams.create |
| Edit and add members | teams.update |
| Delete a team | teams.delete |
A person can be in more than one team. Team reports use the membership at the time the report is opened, so adding somebody changes future reports immediately.
Who sees what
Section titled “Who sees what”- Managers maintain users and teams.
- The team report is available to a manager who owns a team.
- The user report is administrator-only.
- Team attendance needs
punchClock.adjust(manager, own team) orpunchClock.readAll(administrator, whole tenant).
Common tasks
Section titled “Common tasks”A new colleague cannot sign in. Check that they have a Microsoft 365 account in your organisation and that the Timeora app is available to them. Their user record is created on first sign-in.
Somebody sees the wrong modules. Compare their role with the licence tier. Modules need the tier; actions need the permission. See Roles and permissions.
A manager cannot open attendance. Managers adjust their own team’s account. Seeing everybody is the administrator right.