Roles are common sets of tasks that a member of your business organization (such as dispatcher, manager, personal assistant, and human resources) needs to perform. You can define roles and specify the rights or privileges that go with them. By organizing privileges into roles, it is easy to ensure that your employees have the right configuration of privileges to get their jobs done. Roles do not need to be exclusive: a subuser can have an arbitrary number of roles.
When you assign roles to a user (using either the hierarchy or the user dialog box), that user is granted any permissions that the role allows and is denied any permissions that the role forbids. Any rights that are explicitly allowed or denied to the user override the results of permissions allowed or denied by the user's roles. If a user is not explicitly granted a right, then if any role assigned to the user denies that right, the user will not have permission to that right. If a user is not explicitly denied a right, and is not a member of any role that denies the right, then the user has permission to that right only if the right is explicitly granted to the user or if the right is explicitly granted to one of the user's roles. Note that this means roles that deny user rights take precedence over roles that grant user rights.
By default, the platform includes four read-only roles suitable for assignment to the most commonly found categories of users: "Default Admin User", "Default Standard User", "Default Mobile User", and "Default Viewer". The "Default Admin User" role is explicitly granted access to most key rights, including core fleet, team, driver and subuser creation and management tasks (including via the Hierarchy) and InSight Alert, reporting, tags, translation, maintenance and form configuration rights.
The "Default Standard User" role is given a subset of these rights that relate only to marker management, dashboards, and driver assignment; but not reports, alerts, people, team, subuser, tags, maintenance or forms management. The "Default Mobile User" role cannot access the platform, but is given access by default to use mobile apps and the mobile messaging systems provided, as well as assign drivers. The "Default Viewer" read-only role is explicitly denied access to all key rights used by people managers, supervisors and drivers, including rights to see markers, reports, forms, alerts, and is configured as a "lite" user with limited access to platform content.
These four default roles cannot be edited or deleted (as indicated by a padlock icon beside them under the 'Read Only' column), but can be useful as templates when creating additional roles for your organization.
From the Tasks of the navigation bar choose Roles to open the Roles screen.
Click the Create button to define a new role. A new role is added to the list with the name "New Role". You can then select the new role and use the right side of the screen to give it a name, indicate which privileges go with the role, and assign the role to users.
Click the Delete button to remove a role definition. The role is automatically removed from any users to which it had been assigned.
Click the Copy button to clone the selected role in the list. The copy of the role duplicates the rights of the source role, but does not contain any assigned users.
List of currently defined roles, along with a count of the number of users to which the role is assigned. Select a role in the list to edit or delete it.
The right side of the screen is divided into three pages of information:
Type the name of a role to filter the list to include only items that include all or some of the text that you type.
Click the Save button to save any edits you have made to a role or the users it is assigned to.
If there are more roles defined than fit in a single screen, use the navigation controls to navigate through the list of defined roles.
To use the column picker menu to save your preferred grid order, click the header drop-down arrow, then select the Save Visible Columns, Save Sort Order, or Save Column Order check boxes, or any combination of these. When you next sign in, the layout you choose is retained.