User Management

Users are managed per customer. Each user has a role that determines their permissions.

Role Model

RolePermissions
System AdminFull access to all customers and settings. No customer assigned.
Customer AdminFull access to own customer and sub-customers. Can manage users.
ManagerAccess to sub-customers. Can manage devices and tokens but cannot create admins.
ViewerRead-only access to the assigned customer.

Escalation Protection

  • A user cannot assign a role higher than their own
  • An admin cannot deactivate themselves
  • A manager cannot create admins for their own customer
  • An account that is also assigned to customers outside your scope can only be changed by a system admin (email, password, 2FA and deactivation apply to all customers of the account)

Inviting Users

  1. Open Customer Management and select the customer
  2. In the Users section, go to Create new user
  3. Enter username and email and select the role
  4. Click Invite
  5. The person receives an email with a link and sets their own password. The link is valid for 72 hours and can be used once.

Until the invitation is accepted, the user is listed as Invited. Use the envelope icon to resend the invitation, for example when the link has expired; the previous link becomes invalid. Accepting the invitation confirms the email address.

If the email address already belongs to an account in your scope, that account is assigned to the customer instead of creating a new one.

Editing Users

Editable fields:

  • Email address (requires re-verification; open invitation links become invalid, resend the invitation afterwards)
  • Role (with escalation protection)

Resetting Passwords

As an admin, you can reset a user’s password:

  1. Click Reset Password next to the user
  2. On next login, the FleetManager takes the user straight to changing their password

Alternatively, users can request a new password via Forgot Password on the login page.

Managing 2FA

  • Users can set up TOTP-based two-factor authentication in their Profile
  • As an admin, you can disable 2FA for a user (e.g., if they lost their device)
  • Recovery codes are displayed during 2FA setup and should be stored securely

Deactivating Users

  1. Click Deactivate next to the user
  2. The user can no longer log in
  3. Their data is preserved (audit trail)

Deactivated users cannot be reactivated. Create a new account if needed.

Multiple Customers

A user can have access to multiple customers (multi-customer). In the dashboard, the customer switcher in the app bar allows switching between customers.