People and roles

Everyone who signs in to your company's console is a user, and every user holds one or more roles. A role decides what that person can see and change. You manage both on two pages: People (who is in) and Roles (what each role may do). Pages a person's roles do not allow simply do not appear in their menu.

Which role should I give?

When in doubt, start lower. Viewer is safe for anyone: it changes nothing. You can raise someone's role at any time. It reaches them within a few minutes, when their sign-in refreshes; signing out and back in applies it at once.

The four roles

Owner

For: the person who pays for LemursEye, and anyone who runs the company with them.

Can do everything inside your company, including the two things no other role can:

• People: invite users, change their roles, suspend and delete them (People page).
• Roles: change what each role may do in your company (Roles page).
• Settings and apps: change settings, and switch modules on and off.

Plus all the work a fleet manager does.

Keep two owners if you can, so the company never depends on one person's account.

Fleet manager

For: the people who run the fleet every day.

Can:

• Add, edit and remove vehicles; register, assign and retire trackers; manage drivers.
• See the live map, trip history, fuel and cost figures and reports, and generate a digest on demand.
• See and acknowledge alerts, change alert rules, draw and edit geofences.
• Dispatch: plan trips, assign them, manage places.

Cannot: invite or manage people, change roles, change settings, or switch modules on and off. They can see settings and which modules are on.

Viewer

For: anyone who needs to look, never to change.

Can see everything a fleet manager sees: the live map, vehicles, trackers, drivers, trip history, fuel and cost, reports, alerts, geofences, planned trips, settings and modules.

Cannot change anything, not even acknowledge an alert. Every button that would change something is refused.

Installer

For: the technician or workshop fitting trackers into your vehicles.

Can: see the list of vehicles, and register, assign and retire trackers: exactly what a fitting job needs.

Cannot see the map, trip history, money, reports, alerts or anything else. When the installation is done, you can suspend or delete the account.

All permissions, side by side

These are the defaults every company starts with. Yours may differ if an owner changed a role (see Changing what a role can do): the Roles page always shows your company's current grid.

A person with two roles gets both sets. For example, Viewer + Installer can look at everything and also fit trackers.

Drivers are not users

A driver does not get an account or a role. Add them on the Drivers tab of Fleet, then press App code: they type the code into the driver app to sign in (you can send it straight to them with Send on WhatsApp). The app only shows them their own work. They never see the console.

Likewise, a phone used as a tracker is a device, not a user: register it on Fleet like any tracker.

Inviting someone

On People, press Invite person, enter their email and pick their roles. Then choose the account type:

• Console (the usual): for someone who works in this web console. They receive an email with a link to choose a password. The link lasts 3 days and brings them straight into the console. Until they use it they show as Invited; if it expired or got lost, open them and press Resend invitation. If you prefer, choose Temporary password instead of the email, and hand it over yourself.
• Phone app: for someone who uses the LemursEye phone app. They get a password at once, shown to you one time, with no email step.

If the invitation email cannot be sent, the account is still created and you are shown a temporary password once: hand it to them yourself. They must change it at first sign-in.

Suspend or delete

• Suspend blocks someone at once: they are signed out everywhere and cannot sign in. Their account and roles stay, and Reactivate lets them back in as they were. Use it for leave, a contractor between jobs, or while you check something.
• Delete removes the account for good. The email address can be invited again later, as a new account.

The safety rules

So that a company can never lock itself out, the platform refuses:

• Changing yourself: you cannot remove your own owner role, suspend yourself or delete yourself. Ask another owner.
• Losing the last owner: the company must always keep one active owner: an owner who is not suspended and has set their password. To step down, make someone else owner first.

An owner whose invitation was never accepted does not count, and can always be removed.

Changing what a role can do

On Roles, an owner can tick and untick permissions for Fleet manager, Viewer, Installer or Owner. The change applies to your company only and to everyone holding that role. The change applies at once. A role you changed is marked Changed; Reset puts it back to the defaults above.

Two permissions always stay with owners: Invite people and set their roles and Change what your company's roles can do. They cannot be given to another role, and the owner role cannot lose them (nor See the people in this company). Nobody can untick their way out of their own company.