By default employees are only allowed to show their QR barcode at a terminal when logged in on the app. Employees can be given permissions to clock in/out also.
This permission is enabled in the employee module of your online Time and Labor account. Edit or add a new employee and click on the permissions tab.
Check the permissions option to allow the employee to clock in and out from the mobile app