Managing user permissions
On the Permissions tab of user details, you can configure their access rights on devices, drivers, entities and workspaces. This page describes how to configure permissions for a user and what each permission allows.
Instead of configuring permissions individually for each user, you can create a role and assign it to multiple users. See Managing user roles.
The permissions listed below apply to actions performed in both the user interface and through the API. By granting a permission, you are allowing the user to perform the corresponding operations using the API as well.
To test the availability of functionalities for the customer users, you can simulate a user session in Wialon Platform FleetSpace with all the applied permissions and interface changes. In the editor mode toolbar, click the button
and select a user from the user preview dropdown.
Configuring permissions for a user
Permissions are configured separately for each customer user in Wialon Platform Studio.
-
In Wialon Platform Studio, open the Customers page.
-
Select the customer whose user you want to configure.
-
Open the Users tab.
-
Click the user name, or click New user to create a user.

-
Open the Permissions tab.

-
Set the permissions in the Devices, Drivers, Entities, and Workspaces categories. The permissions required for a specific module are listed in the prerequisites of the module section, for example, Forms or Task desk.
-
Click Save.
The new permissions apply to the user at once. If the user is logged in to Wialon Platform FleetSpace, they see the changes after reloading the page.
Setting permissions on devices
Here, you can grant permissions related to devices.

Set available permissions and the level of access they provide for managing devices.
| Permission | Description |
|---|---|
| View | Default permission that allows users to see devices with their parameters and real-time data. Allows the user to see devices, their location, motion state, telematics data, and other properties. This permission can’t be disabled. |
| Update | Allows the user to edit device properties, such as changing labels, setting counter values, deleting tachograph files, enabling or disabling the Private use mode. Also allows editing devices on the Setup center page in Wialon Platform FleetSpace. Without this permission, the device information on this page opens in view-only mode. |
| Send commands | Allows the user to send commands to devices. |
| Request history | Allows the user to view the track player, timelines and graphics in the device details, Dashboard widgets and run device-related reports. |
| View tachograph files | Allows the user to view and download tachograph files from devices. |
For the customers with the Indoor asset tracking billing plan, you can set only the View, Update, and Send commands permissions on devices.
Setting permissions on drivers
Set permissions for creating, viewing, updating, and deleting driver profiles, as well as granting users access to the Wialon Driver app.

| Permission | Description |
|---|---|
| Create | Allows the user to create new driver profiles. |
| Read | Allows the user to see the Drivers management and Drivers online pages, view driver profiles, assignments, and tachograph files. |
| Update | Allows the user to edit driver profiles and manage their assignments. |
| Delete | Allows the user to delete driver profiles. |
| Access to Driver App | Allows the user to grant access to the Wialon Driver app on the Drivers management page. |
Setting permissions on entities
Provide control over specific features.

For most entities, you can assign View, Update, Create, and Delete permissions. The set of available permissions depends on the modules enabled for the customer. For the customers with the Indoor asset tracking billing plan, the list contains other entities. For details, see Indoor asset tracking entities.
| Entity | Permission | Description |
|---|---|---|
| Actions | View, Update, Create, Delete | Control access to action templates: view titles and text of notifications. Updating, creating and deleting action templates is available only using the API. |
| Automations | View, Update, Create, Delete | Control access to automations: view names of automations an indication of source of an event, for example, in Tasks. Updating, creating and deleting automations is available using the API. |
| Form templates | View | Control access to viewing form templates. Updating, creating and deleting form templates is available only using the API. |
| Forms | View, Update, Create | Control access to viewing and updating form information. Updating and creating forms is available only using the API. |
| Custom report | View | Control access to custom reports on the Reports page. Only View access is available for the Custom report entity. Create, update, and delete operations aren’t supported. |
| Driver behavior | View | Control access to driver behavior criteria. Updating, creating and deleting driver behavior criteria is available only using the API. |
| Emissions | View | Control access to viewing emissions data. Only View access is available for the Emissions entity. Create, update, and delete operations aren’t supported. |
| Geofences | View, Update, Create, Delete | Control access to managing geofences. |
| Geofences groups | View, Update, Create, Delete | Control access to managing groups of geofences. |
| Labels | View, Update, Create, Delete | Control access to managing labels for devices. The View permission allows viewing the Labels page. When this permission is disabled, the Dashboard page doesn’t show label information in the Vehicle types dropdown list or in the configured widgets. The permissions also control managing labels and label groups on the Labels tab of the Setup center page in Wialon Platform FleetSpace. See Creating a new label. |
| Service plans | View, Update, Create, Delete | Control access to managing service plans. Viewing the Maintenance page, creating, editing, deleting service plans on the Service plans tab. |
| Services | View, Update, Create, Delete | Control access to managing services: viewing the Maintenance page, creating, editing, deleting services on the Services tab and in the device details. |
| Tasks | View, Update | Control access to viewing the Task desk page and related Dashboard widgets. Changing the status of tasks or adding notes. |
| Tracking links | View, Update, Create, Delete | Control access to managing tracking links. |
| Users | View, Update, Create, Delete | Control access to other users: view usernames in logs, in the interface pages when they are mentioned as creators of an entity or an author of an update. |
Indoor asset tracking entities
If the customer has the Indoor asset tracking billing plan, the Entities section contains the entities of indoor asset tracking instead of the fleet ones. The Users entity is available too. It works the same way as for other customers.

For each entity, you can assign View, Update, Create, and Delete permissions. When you select any permission, the View permission is selected automatically. If you clear the View checkbox, all permissions for that entity are removed.
| Entity | Permission | Description |
|---|---|---|
| Anchors | View, Update, Create, Delete | Control access to anchors and their positions on floor plans. |
| Asset categories | View, Update, Create, Delete | Control access to asset categories on the Categories tab of the Assets page. |
| Assets | View, Update, Create, Delete | Control access to assets on the Assets page, including pairing them with tags. |
| Buildings | View, Update, Create, Delete | Control access to buildings on the Buildings page. |
| Floors | View, Update, Create, Delete | Control access to floor plans, their scale, and their properties. |
| Gateways | View, Update, Create, Delete | Control access to gateways and their positions on floor plans. |
| Tags | View, Update, Create, Delete | Control access to tags on the Tags page. |
| Zones | View, Update, Create, Delete | Control access to zones drawn on floor plans. |
To open the Reports page and view the movement history of assets, the user must have the View permission on Assets and Buildings. Without either of them, the page isn’t shown in the menu.
For details on setting up the account, see Setting up an account for indoor asset tracking.
Setting permissions on workspaces
Select the workspace or multiple workspaces the user can access. A user must have access to at least one workspace to use Wialon Platform FleetSpace.
The list contains only the workspaces assigned to the customer. If you remove a workspace from the customer, the users of this customer lose access to it. If the customer has no assigned workspaces, its users work with the default workspace.