The Timesheets page respects the permission that hides it

A role without Timesheets Read does not have access to the Timesheets page, whether it is reached from the menu, by clicking through from Insights, or by going straight to the address. The page checks the same permission that decides whether the menu entry appears.