For each user, it is possible to set permissions under the "Permissions" tab. On this page you will find an explanation of what each permission does:
Allow final approval (HR/FIN)
These permissions allow the user to give final approval to reports sent to them (final approver)
Allow to view all expenses (Accountant)
These permissions allow the user to view all expenses and reports from all users, but nothing can be edited.
Allow to (pre)check expense reports (Controller)
With these rights the user can perform a pre-check on expense reports (i.e. assign the status 'checked')
Allow to alter settings (Admin)
These rights make the user an administrator who has access to the administration environment and can therefore change all settings in the system and manage users (and rights).