Start with responsibilities
List the tasks performed by dispatch, safety, maintenance, depot managers and administrators. Grant only the fleet scope and actions required for each role.
Separate sensitive actions
Review permissions for video export, driver identity changes, user management and device configuration individually. Avoid shared administrator accounts and define an approval path for access changes.
Validate with real users
Test each role using a representative user account. Confirm both what the user can do and which fleets or records they cannot see. Repeat checks when a user moves role or depot.
Operate the access lifecycle
Assign an owner for joiners, movers and leavers. Review access periodically and remove obsolete accounts through the agreed process. Exact permission names and authentication options depend on your account configuration.
Your action checklist
- Role-to-task matrix
- Fleet scope per role
- Sensitive action review
- Joiner and leaver process
Product availability depends on your devices, integrations, permissions and enabled modules. Confirm your organisation’s configuration before implementation.