add rights to view time entries to role member