User roles and permissions control what each person on your team can see and do inside Laurel. Whether someone needs full admin access to manage firm‑wide settings or they only need to work on their own timesheet, Laurel’s role system makes sure everyone has the right level of access.

This article explains each available role, what permissions come with it, and how roles work together so you can configure access confidently for your firm.
​

Every person in your Laurel account is assigned at least one role. A role determines which features, settings, and data that person can access. Roles exist to keep sensitive information secure, give administrators the tools they need to manage the firm, and ensure that everyday users have a clean, focused experience without unnecessary complexity.

Laurel offers five user roles: Super Customer Admin, Customer Admin, User, Super Delegate, and Trainer. Some roles can be combined — for example, someone can be both a Customer Admin and a Trainer at the same time.

The Super Customer Admin has the highest level of access within a single customer account. This role has full read and write access to all firm settings and all user settings. In addition to everything a Customer Admin can do, Super Customer Admins can:

This role is best suited for IT administrators or firm leaders who need complete control over Laurel’s configuration.

The Customer Admin has full read and write access to all user settings within the customer account. Customer Admins can add and edit users, assign delegates, update display preferences, manage compliance rules, and handle most day‑to‑day administrative tasks.

Unlike Super Customer Admins, Customer Admins cannot manage firm‑wide settings such as SSO configuration, billing integration sync, or capture integration status. They can update user roles, but only to assign the Customer Admin, Super Delegate, or Trainer roles.

The User role is the standard role for anyone who uses Laurel to track and submit their time. Users have full access to their own account settings, timesheet, timers, calendar, and Time Control features. They can manage their own delegates, set display preferences, choose default codes, and create narrative shortcuts.

Users cannot access other people’s timesheets or change firm‑wide or customer‑level settings.

The Super Delegate has full read and write access to all timesheets across the customer account. This role is designed for people who need to view and manage time entries on behalf of others, such as executive assistants or billing coordinators.

Super Delegates can view and access all timekeepers’ time through the Timesheet view but cannot see other users’ data in Time Control. Like Users, they have full access to their own account settings, timesheet, and timers.

The Trainer role is a newer, add‑on role designed for team members who run internal Laurel training sessions. Trainers can instantly populate their Laurel account with 60–100 realistic, industry‑specific sample activities so they can demonstrate features without exposing real client data.

Trainers can choose between two data sets: External Legal and External Accounting. The sample data appears in the Trainer’s Work Activity panel just like live data and can be used to demo all of Laurel’s core functionality.

The Trainer role is always combined with another role (for example, Customer Admin + Trainer). It does not replace existing permissions; it only adds the ability to seed sample data for training.

All roles have full access to their own timekeeping features. This includes adding, editing, deleting, merging, and releasing entries on the Timesheet, viewing all captured activities, starting and stopping timers, and viewing release status and totals on the Calendar. All roles also have individual Time Control access, where they can view and edit their own entries, reassign entries across multiple days, and release entries across multiple days.

All roles have equal access to their own individual account settings. Every user can edit personal details, manage their own delegates, choose display preferences, update time zone and week start date, view captured websites and apps, choose default codes, and create or edit narrative shortcuts.

Adding users, editing user details, assigning delegates, and updating preferences like time zones and week start dates are available to Super Customer Admins and Customer Admins. Users and Super Delegates cannot perform these actions for other people and can only manage their own account settings.

Customer‑level settings are largely restricted to the Super Customer Admin. These include configuring SSO, adding company‑wide websites, updating the default billing increment and fiscal start date, pausing releases company‑wide, controlling entry notes, adding default codes, adding entry validation rules, viewing billing integration sync and capture integration status, viewing integration status by user, and uploading users via CSV files.

Customer Admins do not have access to these customer‑level settings.

Compliance rule management is available to Super Customer Admins and Customer Admins. Both roles can add and edit compliance rules at the firm, customer, and matter levels, including enforced rules, awareness rules, and restricted words. Users and Super Delegates do not have access to compliance settings.

The Super Customer Admin has the broadest Time Control access. They can view monthly time totals across the company and view, edit, reassign, delete, release, unrelease, and undelete entries for all timekeepers.

Customer Admins can only see and manage their own entries in Time Control and cannot unrelease or undelete entries, even their own. Users and Super Delegates also only have access to their own entries in Time Control.

The Super Delegate can view and access all timekeepers’ time through the Timesheet view, but this access does not extend to Time Control. All roles can view their assigned delegate’s Timesheet and activities, but no role can view a delegate’s entries in Time Control.

A user can hold more than one role at the same time. Common combinations include Customer Admin plus Trainer (for admins who also run training sessions) and Super Delegate plus another administrative role (for people who need both firm management abilities and timesheet access across users). When roles are combined, the user receives the permissions of all assigned roles.