Permissions & Roles

Levy Fleets uses role-based access control (RBAC) to manage what team members can do within the dashboard. Each role has a predefined set of permissions appropriate for different job functions.

Overview

The permission system ensures:

• Security - Users only access what they need
• Accountability - Actions are tracked by user
• Flexibility - Roles match job responsibilities
• Scalability - Easy to onboard new team members

Role Hierarchy

Roles are organized from most to least privileged:

Super Admin / Global Admin (Levy Staff)
         ↓
       Admin
         ↓
    Fleet Manager
         ↓
   Customer Support
         ↓
      Analyst
         ↓
   Service Technician

Available Roles

Admin

Full access including team management

Admins have complete control over their subaccount, including the ability to invite and manage other team members.

Best for: Business owners, operations directors, account managers

Fleet Manager

Full operational access without team management

Fleet Managers can perform all day-to-day operations but cannot invite or remove team members.

Best for: Operations managers, fleet supervisors, shift leads

Customer Support

Handle customer issues without pricing or zone access

Customer Support can help customers and manage rides but cannot modify pricing or zones.

Best for: Customer service representatives, support agents

Analyst

View-only access to reports and data

Analysts can view all data but cannot make changes that affect operations or finances.

Best for: Business analysts, reporting staff, financial reviewers

Service Technician

Vehicle control, IoT commands, and view rides/zones

Service Technicians focus on vehicle maintenance, battery swaps, and repositioning. They can view rides and zones to locate vehicles and understand usage patterns.

Best for: Maintenance staff, field technicians, battery swap crews, repositioning teams

Permission Categories

Team Management

Control who can manage team members:

Vehicle Management

Control vehicle operations:

Zone Management

Control service area configuration:

Pricing Management

Control pricing configuration:

Customer Management

Control customer operations:

Ride Management

Control ride operations:

IoT Management

Control IoT device operations:

Settings Management

Control account settings:

Permission Matrix

Quick Reference

Assigning Roles

When Inviting Team Members

Changing Existing Roles

Best Practices

Principle of Least Privilege

Assign the minimum permissions needed for each role:

1. Start restrictive - Begin with fewer permissions
2. Upgrade as needed - Add access when justified
3. Review regularly - Audit roles periodically
4. Remove promptly - Revoke access when no longer needed

Role Selection Guide

Security Considerations

1. Limit Admin accounts - Only key personnel should have Admin access
2. Separate duties - Don't give everyone the same role
3. Audit access - Review who has access periodically
4. Remove inactive users - Promptly remove departed employees

Troubleshooting

Permission Denied Errors

If a user sees "Insufficient permissions":

1. Check their current role in Team settings
2. Verify the required permission for the action
3. Upgrade their role if appropriate
4. Have them refresh their browser

Can't Invite Team Members

Only Admin role can invite others:

1. Verify you have Admin role
2. Check you're on the correct subaccount
3. Ensure the email is valid and unique

Role Not Updating

If role changes aren't applying:

1. Have the user log out and back in
2. Clear browser cache
3. Check for any error messages
4. Verify the change was saved

API Permission Checks

For developers integrating via API, permissions are enforced on all endpoints:

// Example error response
{
  "error": "Insufficient permissions. Required: pricing:configure",
  "status": 403
}

The Partner API uses separate API key permissions, not dashboard roles.