Overview
KonstructIQ controls what each team member can see and do through roles. Roles are assigned per staff member and are additive — they work like switches you turn on, not exclusive tiers. A single person can have more than one role at a time, and their access is the sum of every role enabled for them.
There are five roles:
Basic Access
Project View
Project Admin
Financial Admin
Full Access
Assigning roles to a staff member
Go to People > Staff.
Click Create to add a new staff member, or select an existing one to edit.
Fill in the staff member's contact details.
In the Role section, use the Enable checkboxes to turn on each role you want the person to have. You can enable more than one.
Click Save.
Basic Access is enabled by default for every staff member — it is the baseline that everyone starts with. You then layer additional roles on top depending on what the person needs to do.
What each role can do
Basic Access
The default for every staff member. Basic Access allows a user to create and view their own timecards (clock in and clock out) and submit expenses. This is the right level for field or hourly staff who only need to track their own time and expenses.
Project View
For the projects a user has been given access to, Project View allows the user to view the project's Budget, Estimate, Change Orders, Invoices, and Bills. It is read-only — the user can see the financial picture of their assigned projects but cannot change it.
Project Admin
For the projects a user has access to, Project Admin allows the user to create and make changes to the Budget, Estimate, Change Orders, Invoices, Bills, and Subcontractors. This is the level for project managers or leads who actively run their assigned jobs.
Financial Admin
Financial Admin grants global (company-wide) access to pay bills, receive invoice payments, and record payments. Use it for bookkeepers or office staff who handle money movement across all projects.
Full Access
Full Access grants global access to create and manage Projects, Clients, Staff, and Settings, and to view Reports. This is the broadest role — appropriate for owners, admins, and office managers who run the whole account.
Combining roles
Because roles stack, you mix them to match a person's real responsibilities. A few common combinations:
Field crew member: Basic Access only — clocks in/out and submits expenses.
Project manager: Basic Access + Project Admin — tracks their own time and fully manages their assigned projects.
Estimator / coordinator (read-only): Basic Access + Project View — can review project financials without changing them.
Bookkeeper: Basic Access + Financial Admin — handles bills and payments company-wide.
Owner / office admin: Full Access (typically alongside Basic Access) — manages the entire account.
Note on project access: Project View and Project Admin apply only to the projects a user has been given access to. Project access is assigned separately from the role itself.
FAQs
Can a Basic Access user clock in and out? Yes. Clocking in and out is part of managing your own timecards, which Basic Access includes.
Can a Basic Access user submit expenses? Yes.
Does everyone have Basic Access? Yes — it is enabled by default for every staff member as the baseline, and other roles are added on top.
What's the difference between Project View and Project Admin? Project View is read-only for a project's financials; Project Admin can create and change them (and manage subcontractors).
What's the difference between Financial Admin and Full Access? Financial Admin is limited to paying bills and handling invoice payments across the company. Full Access additionally covers creating and managing Projects, Clients, Staff, Settings, and viewing Reports.
YouTube Video