Martin,
I have seen this done in many ways. The most common is to make a Project called Admin (specify the Project Manager and add a Time Entry Task for each Resource, requiring them to add time there. If you have your settings configured appropriately, only the PM of the Project will be able to approve the time or the Direct Manager of the Resource (if option is set), etc...