Refer to this article if your version is below 7.4.1

The admin can select what privileges the employees and supervisors will have on the punch in/out and attendance. Select Time>Attendance>Configurations. The Attendance Configurations Screen will appear as below. This screen allows you to disable/enable the following tasks.

1. Make the time field editable/non-editable when punching in and out.
2. Make the attendance records editable/non-editable by employees.
3. Make the attendance records of subordinates editable/non-editable by supervisors.
4. If you have purchased the Pay policies, it is shown as enabled. (This can be are enabled from the backend)
5. IP Based Restriction – The web/Mobile punch in/out can be configured to accept connections from a set IP range. You can add multiple IP ranges.