Roles
Use built-in roles or create a custom set of permissions.
What is a role?
A role is a named bundle of permissions that you assign to users. Rather than granting abilities to each person individually, you describe a job once—“Viewer”, “Operator”, “Workshop”—and assign it to everyone who does that job.
- Permission
- A single allowed action, such as viewing vehicles, exporting reports, or acknowledging alerts.
- Role
- A collection of those permissions, assigned to one or more users.
A role controls what someone can do. It does not limit which records they see—that is the job of visibility groups.
Built-in roles
Read-only access to fleet data, alerts, reports, and tickets.
Day-to-day fleet management, alert acknowledgement, and maintenance work.
Full organisation administration, including users, roles, groups, and settings.
Create a custom role
- Open Settings → Roles and create a role with a clear job-based name.
- Open the Role Builder and select only the resource permissions that job requires.
- Save the role, then assign it from the relevant user’s page.
- Sign in as or check with that user to verify the effective access.
Apply least privilege
View, create, edit, delete, acknowledge, export, purchase, and manage actions are often separate. Grant operational actions without administrative ones when that matches the person’s responsibilities.
Only organisation-wide administrators should manage roles. Group-restricted users cannot change role definitions.