But it looks like it’s planned.
There’s no portal right now but you already have unlimited users so you can give them restricted view and create access to the Timesheets
tab only.
Also, no approval process is required if the users have no access to update or copy to Payslips. Because effectively, copying the time to a Payslip should serve as your approval.