Managing user permissions

On the Permissions tab of user details, you can configure their access rights on devices, drivers, entities and workspaces. This page describes how to configure permissions for a user and what each permission allows.

Instead of configuring permissions individually for each user, you can create a role and assign it to multiple users. See Managing user roles.

To test the availability of functionalities for the customer users, you can simulate a user session in Wialon Platform FleetSpace with all the applied permissions and interface changes. In the editor mode toolbar, click the button preview and select a user from the user preview dropdown.

Configuring permissions for a user

Permissions are configured separately for each customer user in Wialon Platform Studio.

  1. In Wialon Platform Studio, open the Customers page.

  2. Select the customer whose user you want to configure.

  3. Open the Users tab.

  4. Click the user name, or click New user to create a user.

  5. Open the Permissions tab.

  6. Set the permissions in the Devices, Drivers, Entities, and Workspaces categories. The permissions required for a specific module are listed in the prerequisites of the module section, for example, Forms or Task desk.

  7. Click Save.

The new permissions apply to the user at once. If the user is logged in to Wialon Platform FleetSpace, they see the changes after reloading the page.

Setting permissions on devices

Here, you can grant permissions related to devices.

Set available permissions and the level of access they provide for managing devices.

Permission Description
View Default permission that allows users to see devices with their parameters and real-time data. Allows the user to see devices, their location, motion state, telematics data, and other properties. This permission can’t be disabled.
Update Allows the user to edit device properties, such as changing labels, setting counter values, deleting tachograph files, enabling or disabling the Private use mode. Also allows editing devices on the Setup center page in Wialon Platform FleetSpace. Without this permission, the device information on this page opens in view-only mode.
Send commands Allows the user to send commands to devices.
Request history Allows the user to view the track player, timelines and graphics in the device details, Dashboard widgets and run device-related reports.
View tachograph files Allows the user to view and download tachograph files from devices.

For the customers with the Indoor asset tracking billing plan, you can set only the View, Update, and Send commands permissions on devices.

Setting permissions on drivers

Set permissions for creating, viewing, updating, and deleting driver profiles, as well as granting users access to the Wialon Driver app.

Permission Description
Create Allows the user to create new driver profiles.
Read Allows the user to see the Drivers management and Drivers online pages, view driver profiles, assignments, and tachograph files.
Update Allows the user to edit driver profiles and manage their assignments.
Delete Allows the user to delete driver profiles.
Access to Driver App Allows the user to grant access to the Wialon Driver app on the Drivers management page.

Setting permissions on entities

Provide control over specific features.

For most entities, you can assign View, Update, Create, and Delete permissions. The set of available permissions depends on the modules enabled for the customer. For the customers with the Indoor asset tracking billing plan, the list contains other entities. For details, see Indoor asset tracking entities.

Entity Permission Description
Actions View, Update, Create, Delete Control access to action templates: view titles and text of notifications. Updating, creating and deleting action templates is available only using the API.
Automations View, Update, Create, Delete Control access to automations: view names of automations an indication of source of an event, for example, in Tasks. Updating, creating and deleting automations is available using the API.
Form templates View Control access to viewing form templates. Updating, creating and deleting form templates is available only using the API.
Forms View, Update, Create Control access to viewing and updating form information. Updating and creating forms is available only using the API.
Custom report View Control access to custom reports on the Reports page. Only View access is available for the Custom report entity. Create, update, and delete operations aren’t supported.
Driver behavior View Control access to driver behavior criteria. Updating, creating and deleting driver behavior criteria is available only using the API.
Emissions View Control access to viewing emissions data. Only View access is available for the Emissions entity. Create, update, and delete operations aren’t supported.
Geofences View, Update, Create, Delete Control access to managing geofences.
Geofences groups View, Update, Create, Delete Control access to managing groups of geofences.
Labels View, Update, Create, Delete Control access to managing labels for devices. The View permission allows viewing the Labels page. When this permission is disabled, the Dashboard page doesn’t show label information in the Vehicle types dropdown list or in the configured widgets. The permissions also control managing labels and label groups on the Labels tab of the Setup center page in Wialon Platform FleetSpace. See Creating a new label.
Service plans View, Update, Create, Delete Control access to managing service plans. Viewing the Maintenance page, creating, editing, deleting service plans on the Service plans tab.
Services View, Update, Create, Delete Control access to managing services: viewing the Maintenance page, creating, editing, deleting services on the Services tab and in the device details.
Tasks View, Update Control access to viewing the Task desk page and related Dashboard widgets. Changing the status of tasks or adding notes.
Tracking links View, Update, Create, Delete Control access to managing tracking links.
Users View, Update, Create, Delete Control access to other users: view usernames in logs, in the interface pages when they are mentioned as creators of an entity or an author of an update.

Indoor asset tracking entities

If the customer has the Indoor asset tracking billing plan, the Entities section contains the entities of indoor asset tracking instead of the fleet ones. The Users entity is available too. It works the same way as for other customers.

For each entity, you can assign View, Update, Create, and Delete permissions. When you select any permission, the View permission is selected automatically. If you clear the View checkbox, all permissions for that entity are removed.

Entity Permission Description
Anchors View, Update, Create, Delete Control access to anchors and their positions on floor plans.
Asset categories View, Update, Create, Delete Control access to asset categories on the Categories tab of the Assets page.
Assets View, Update, Create, Delete Control access to assets on the Assets page, including pairing them with tags.
Buildings View, Update, Create, Delete Control access to buildings on the Buildings page.
Floors View, Update, Create, Delete Control access to floor plans, their scale, and their properties.
Gateways View, Update, Create, Delete Control access to gateways and their positions on floor plans.
Tags View, Update, Create, Delete Control access to tags on the Tags page.
Zones View, Update, Create, Delete Control access to zones drawn on floor plans.

To open the Reports page and view the movement history of assets, the user must have the View permission on Assets and Buildings. Without either of them, the page isn’t shown in the menu.

For details on setting up the account, see Setting up an account for indoor asset tracking.

Setting permissions on workspaces

Select the workspace or multiple workspaces the user can access. A user must have access to at least one workspace to use Wialon Platform FleetSpace.

The list contains only the workspaces assigned to the customer. If you remove a workspace from the customer, the users of this customer lose access to it. If the customer has no assigned workspaces, its users work with the default workspace.

If you find a mistake in the text, please select it and press Ctrl+Enter.