Betriebsrat and Plan Approval

Betriebsrat is a supplied role with exactly three permissions: read plans, read reports, and sign the second approval stage. Everything else is denied.

The Betriebsrat does not see payroll data. Payroll, Controlling, and Expenses deny access. What the role can see in reports is time data only, without any amounts: planned time, actual time, counted time, check-in, and check-out.

The role also cannot see employee master data, customers, inventory, invoicing, or communications to security officers.

A note that saves searching: The menu bar is not reduced for this role. The Betriebsrat sees menu items that cannot be opened. The plan view in Scheduling and Shifts, the hours report, the Analysis, and the Audit Log work for this role.

Approval always applies to a full calendar month, not an individual shift or a freely selected period. The approval status is shown as a row above the plan in Scheduling and Shifts, with one field for each visible month. There is no separate page for it.

A month moves through: open, stage 1, approved. Scheduling signs stage 1, and the Betriebsrat signs stage 2.

The same person cannot sign both stages. This is strictly enforced. The button then disappears and "Second person required" is shown. Even someone with both permissions cannot countersign their own approval.

Exactly one thing: publishing draft shifts. Planning, creating, assigning, and changing remain permitted. Security officers simply do not learn about them.

An attempt to publish without full approval is rejected and lists the affected months. Partial approval is not enough. Stage 1 alone does not release anything.

Once a month has been signed, every plan change in that month requires a reason of 10 to 500 characters. The dialog appears automatically as soon as the server pauses the change, and the exact wording is logged.

The month then reverts to "changed" and must be signed again. The number of times this happens is counted.

If a change fails for technical reasons, the approval remains in place. Only a change that is actually written reverts the month.

Both operate on calendar months and both apply restrictions, but they do opposite things:

• Plan approval acts beforehand and opens: it enables publishing. It is off by default and requires two people.
• Period close acts afterward and closes: it seals the settled month against changes. It is always available and one person is sufficient.

They also depend on different permissions. The Betriebsrat cannot close or reopen a month and cannot see the corresponding setting at all.