How to limit team member access to time and expense entries in Microsoft Dynamics 365 Project Service Automation V3

We sometimes have a few team members who only need to do the time entries and expense entries. They do not need any exposure to other entities, and from a security standpoint it might be unwise to share the information too broadly. This raises an interesting question: How do we grant them access to only certain entries using out of the box security roles in Dynamics 365 Project Service Automation?

In this article, I'll share some simple steps to better align your security in the settings for D365 PSA.

1. From security, navigate to Users. Then select the user, choose Manage Role and only keep "Project Resource" role.

2. Go to Security-->Security Roles-->Open the security role "Project Resource". Change the parameters for read-write access as shown below in the images. Check the requirement status and schedule board setting. Finally, save and close.