Okouro docs

Every user in an account holds one of four roles. The role decides which pages appear in the sidebar, which actions are available, and which figures are visible. An administrator assigns the role when inviting a user and can change it later from the user detail.

The four roles

  • Administrator - the whole account: users and invitations, organization settings, the subscription, and every commercial and operational surface.
  • Operations - the administrative seat, often called ADV: settles expenses and works with client records across the commercial surface.
  • Executive - the steering seat: KPIs, margins, and forecasts across the dashboard, staffing, and mission budgets.
  • Consultant - their own day-to-day: their own timesheets, assignments, time off, and expenses.

Administrator, operations, and executive are the business viewers: each of them sees and decides on every consultant, timesheet, time-off request, and expense of the account, just like an administrator. Only the consultant role is narrowed - to their own profile and their team (below).

Team leaders

A consultant profile can name a manager: any user of the account. A user who is the manager of at least one consultant is a team leader for that consultant. Being a team leader is separate from the role: even a consultant can be a team leader.

The manager relationship is what gives team powers to users outside the business viewers - a consultant, or a user without a business role. In the review surfaces (Timesheets, Time off, Expenses), such a team leader sees their own records plus those of the consultants they manage. They can validate subordinates’ timesheets and approve or reject subordinates’ time-off and expense requests, and they can request time off or declare expenses on behalf of subordinates. They can never act on their own records: their own timesheet, their own requests. The business viewers are not narrowed this way: administrator, operations, and executive all see and decide on everyone’s records across the whole account. Operations and executive keep the one limit team leaders have - they never decide the records of their own linked consultant profile. Only an administrator can act on anyone’s records, their own included.

The consultant profile sits beside the role

Any user, in any role, can hold a linked consultant profile. That link alone unlocks the self-service surfaces - your own timesheets, My assignments, Time off, and Expenses - whatever the role. A consultant with a linked profile fills in their timesheet; an operations user with a linked profile also declares their own expenses. Without the link, even an administrator does not see My assignments. See Consultant profiles.

What each role sees in the sidebar

SurfaceAdminOperationsExecutiveConsultant
DashboardYesYesYesYes
Timesheets, Time offYesYesYesyes*
My assignmentsyes*yes*yes*yes*
ExpensesYesYesYesyes*
Pipeline, QuotesYesYesYes-
Clients, MissionsYesYesYes-
ConsultantsYesYesYesYes
StaffingYes-Yes-
Users, OrganizationYes---

* Shown when the user has a linked consultant profile.

Consultants is visible to every role, but the rows are narrowed: the business viewers - administrator, operations, and executive - see every profile, while a consultant sees only their own linked profile and the consultants they manage.

Outside the business viewers, a team leader gains team-scoped access to Timesheets, Time off, and Expenses, plus their team’s consultants.

Figure visibility

Two money fields are gated by role:

  • Daily cost is visible to admin, operations, and executive only.
  • Billing rate is hidden from the consultant role; every other role can see it.

Figures a role may not see simply do not render for that role.