If you want to use a dedicated Sage 300 user account other than the default Admin account you will need to give the dedicated user account full rights to all core Sage modules:

AP, AR, AS, BK, GL, IC and VM

From a technical point of view, this user can be a timecard user as it never needs to log into Sage 300 desktop applications.