Understanding permissions and their uses – Powerfleet Knowledge

Here is a list of all the permissions as found in On-Road IoT and what they are used for.

Access permissions

Click Manage.
Under User admin, click Roles.
Select the role you want to amend by clicking the role name.

Click the Permissions tab on the left.

General permissions	Where and for what is this used?	Access	Create	Update	Delete
Contacts	View contacts in the contact list. Not needed to select from contacts when setting up service reminders, notifications etc. You need to create contact permission to be able to create a contact from anywhere else.	X	X	X	X
Contacts - Import		X
Login - Clickthrough Application	This is a custom permission for one customer only.	X
Login - Customer Insights		X
Login - MiX Fleet Manager Mobile		X
Login - MiX Integrate	Required to authenticate via Intergate and generate an access token for MiX API.	X
Login - MiX Tabs Manager		X
Login - MiX TechTool	Give access to TechTool login	X
Login - Web application	Must have this permission in at least one role to log into MiX Fleet Manager.	X
MiX Insights Sandbox		X
Operational Insights - Login		X
User settings - Personal access tokens		X

Activity Timeline		Access	Create	Update	Delete
Download GPS data	Download GPS data from the trip timeline for a selected vehicle.	X
Download tacho	Download Tacho data from the trip timeline for a selected vehicle.	X
Download video: Video download request	Allows you to request standard and high resolution custom video clip downloads.	X
Trip timeline	Update permission allows trips to be reassigned from one driver to another.	X		X
Trip videos	Gives you permission to view event videos on Trip timeline, Historical tracking, etc.	X
Utilization timeline		X

CAN admin		Access	Create	Update	Delete
	To access CAN script search page.	X
Config Admin		Access	Create	Update	Delete
Advanced - Edit sensitive configuration settings		X
Advanced - Edit sensitive MiX2xxx configuration settings		X
Advanced - Manage diagnostic events	Allows you to add and remove parameters from diagnostic events. If you don't have this permission, you may only edit thresholds on diagnostic events.	X
Advanced - Manage system events	Allows you to add and remove parameters from system events. If you don't have this permission, you may only edit thresholds on system events.	X
Advanced - Update network settings	To be able to amend APN settings.	X
Asset commissioning - Technicians		X
Asset commissioning - Technicians - Change configuration group		X
Configuration Groups		X	X	X	X
Configuration Groups - Asset level - Black flag reason	To view what is different between the asset and its config group.	X
Configuration Groups - Asset level - Compile		X
Configuration Groups - Asset level - Events	To edit events on asset level.	X		X
Configuration Groups - Asset level - Mobile device settings	To change mobile device settings and peripheral settings on asset level.	X
Configuration Groups - Asset level - Reset to configuration group		X
Configuration Groups - Asset level - Upload		X
Configuration Groups - Group level - Compile		X
Configuration Groups - Group level - Compile All		X
Configuration Groups - Group level - Upload		X
Libraries		X
Libraries - Events		X	X	X	X
Libraries - Firmware		X	X
Libraries - Location imports		X
Libraries - Locations		X	X	X	X
Libraries - Mobile devices		X	X	X
Libraries - Parameters		X	X	X
Libraries - Peripherals		X	X	X
MiX Go Configuration		X
MiX Go Configuration - Advanced		X		X
MiX Go Configuration - Standard		X		X
Mobile device settings		X		X
Mobile device settings - Change mobile device	These settings are used on the mobile device settings tab in Fleet Admin.	X
Mobile device settings - Remove mobile device/decommission		X
Mobile device settings - Set engine hours		X
Mobile device settings - Update APN details		X
Mobile device settings - Update AVL frequency		X
Mobile device settings - Update GSM details		X
Mobile device settings - Update Iridium satellite details		X
Mobile device settings - Update satellite details		X
Mobile device settings - Update SIM PIN		X
Mobile device settings - Update SMS details		X
Mobile device settings - Update Streamax details		X
Rovi Configurations		X	X	X	X
Rovi Configurations - Advanced settings		X
Templates		X
Templates - Events		X	X	X	X
Templates - Locations		X	X	X	X
Templates - Mobile device		X	X	X	X
Utilities - Manage scripts		X
Utilities - Plugs		X

Driver Coaching		Access	Create	Update	Delete
Driver debrief configuration	Access allows viewing of the settings and update allows changes to the driver coaching settings page to set up the coaching debrief intervals/frequency, create teams, assign drivers, etc. Note that you also need organization-level access to update/change details.	X	X	X
Driver debrief dashboard	Access to view the debriefing/coaching dashboard insights.	X
Driver debrief session	Access permission will allow users to start the driver debrief/coaching session.	X

DTCO Download Manager		Access	Create	Update	Delete
Company cards		X	X	X	X
DTCO archive settings		X		X
DTCO files		X
Remote task management		X	X	X	X
Settings		X	X	X

Electric Fleet		Access	Create	Update	Delete
Operations		X

Fleet Admin		Access	Create	Update	Delete
Assets		X	X	X	X
Assets - Access control		X		X
Assets - Administrative information	Without this permission you cannot see config type settings on the Fleet Admin asset list.	X
Assets - AEMP Providers	Will allow FSM customers to onboard AEMP assets by adding AEMP providers. Users will also need organization-level access.	X	X	X	X
Assets - Asset level configuration group	If you have edit asset permission, you can edit anything on the page except the config group. This permission allows you to select a config group for an asset.	X		X
Assets - Asset status		X		X
Assets - Certification type		X	X	X	X
Assets - Diagnostics	Gives access to the diagnostics modal on the fleet admin asset list and in Live tracking.	X
Assets - Emergency contacts	Only used for Recover in MiX Control, nowhere else.	X	X	X	X
Assets - Fuel cards	To link fuel cards to an asset.	X	X	X	X
Assets - Fuel data		X	X	X	X
Assets - Fuel import		X
Assets - Import		X
Assets - Keypad numbers		X	X	X	X
Assets - Keypad numbers - Cascade	This permissions will enable the feature to cascade keypad numbers. This permission is not automatically enabled for everyone but must be assigned to a role.	X
Assets - Licence reminders		X	X	X	X
Assets - Licences category		X	X	X	X
Assets - Meter readings		X		X
Assets - Other cost data		X	X	X	X
Assets - Required driver certificates		X	X	X	X
Assets - Required driver licences		X	X	X	X
Assets - Roadworthy certificate reminders		X	X	X	X
Assets - Servicing (History & reminders)		X	X	X	X
Assets - Trailer ID		X		X
Assets - Update Dayton CIQ Key	No longer used	X
Custom groups		X	X	X	X
Customer locations		X	X	X	X
Customers		X	X	X	X
Drivers		X	X	X	X
Drivers - Access control		X	X	X	X
Drivers - Certification type		X	X	X	X
Drivers - Certifications		X	X	X	X
Drivers - Certifications- Import		X
Drivers - Extended driver ID		X	X	X	X
Drivers - Hours of Service		X	X	X	X
Drivers - Hours of Service - Remote driver log off		X
Drivers - Import		X
Drivers - Licence		X	X	X	X
Drivers - Licence category		X	X	X	X
Drivers - MyMiX driver authentication (New)		X		X
Drivers - MyMiX Users		X		X
Drivers - MyMiX Users - Impersonation	Used in MyMiX web portal.	X
IoT data connector management	Access to sync driver and asset details from the MyGeotab platform to Unity On-Road IoT.	X
Organization groups		X		X
Organization groups - Contacts		X		X
Organization groups - MiX account number	Used for the Salesforce integration.	X		X
Organization groups - Timezones		X		X
Passengers		X	X	X	X
Server-side events		X	X	X	X

Hours of Service		Access	Create	Update	Delete
Hours of Service		X
Hours of Service - ELD audit		X
Hours of Service - Log data		X	X	X	X
Hours of Service - Notifications		X	X	X	X
Hours of Service - Unidentified hours		X		X
Hours of Service - Workstate data		X	X	X	X
Logmaster	An access permission that will enable the user to see the Logmaster menu item under Hours of Service.	X
Timeclock		X

Info hub		Access	Create	Update	Delete


Insights		Access	Create	Update	Delete
Category - Audit reports	Grant access to Audit reports The Config Audit Report details changes that have been made to the configuration of the devices and events of units. Additionally the user who has made the changes can also be viewed. Satellite Status and Audit Report shows the history of a specific iridium Satellite Modem (IMEI). The report will show all changes in airtime and commissioning statuses since the IMEI was first captured in the system. This report aids a user in determining which databases the sat terminal was moved to and from, what were the changes in satellite airtime and what the changes were in commissioning the sat terminal on assets as well as the user which authorized the changes. Vehicle Road Speed vs GPS Velocity Report: With this exception based report a user is able to view any differences between road speed and GPS speed based on a configurable speed measure value (km or miles per hour - depending on user regional settings) and can be selected in the selection wizard. The trip criteria/report period will always display the last trip the asset performed where the duration was longer than 30 minutes.	X
Category - Bureau reports	Grants access to Bureau reports: Asset Performance Detail Report Detailed Event Report L (customer) Usage Report MyMiX Driver Login Activity Report Subscription History Subscription History By Organisation All Users	X
Category - Cost reports	Grants access to Cost reports: Cost per Distance Report Service History Report: This report displays an asset's service history details for a pre-defined period.	X
Category - Custom reports		X
Category - Dashboard widgets	Grants access to: 7 Day Dashboard Asset Performance Dashboard Report Road Speed Limit Dashboard	X
Category - Data exclusion reports	Grants access to the Data Exclusion Audit Report.	X
Category - Data quality management	Grants access to: Activity Exclusion Report: This report displays subtrips information on a detail level. The results are based on the users selection criteria and is filtered by the overspeeding, harsh acceleration and braking measurements. Daily Activity Exclusion Report: This report displays trip information on a daily level. The results are based on the users selection criteria and is filtered by the overspeeding, harsh acceleration and braking occurrences Event Position Accuracy Report: This report is intended for internal use only. It is designed to assist staff in verifying event position accuracy. It is strongly advised to select a maximum reporting period of a week since the report is being generated from the asset database.	X
Category - Equipment Utilization reports	Grants access to the following reports, created for migrated FSM customers (and currently only available to FSM customers): Equipment Usage report Equipment Utilization by Asset report Equipment Utilization by Location report Equipment Utilization by Location Summary report Equipment Utilization by Site report	X
Category - Event reports	Grants access to: Detailed Event Report Event Location Summary Report Overview Event Report Summary Event Report Terminal Event Report	X
Category - Fuel reports	Grants access to the fuel reports to review fuel usage, either from data measured on the asset or fuel entries captured online. You must have a fuel measuring device installed on assets to see consumption data on a Measured Fuel Report. The Comparative Fuel Report is useful if you have both measured and entered fuel data for a asset. Daily Engine Hours Fuel Report Daily Fuel Event Consumption Report Detailed Engine Hours Fuel Report Detailed Measured Fuel Report Engine Hours Fuel Report Entered Fuel Report Fuel Monthly Summary Report Fuel Operational Dashboard Measured Fuel Report Monthly Measured Fuel Report Summary Measured Fuel Report - will display summarized measured fuel data for a asset for the date range selected.	X
Category - Hosting & operations reports		X
Category - Hours of service reports	Grants access to these reports, if HOS is enabled for the organization: Available Hours Report Driver Log Report HOS Violations Driver Site Summary Report HOS Violations Organisation Summary Report HOS Violations Report Hours of Service Report Rovi Login Report - shows where a driver is logged into more than one asset at this point in time. It also has the option to show an asset view of which drivers are currently signed into all assets with Rovis. Uncertified Logs Report - shows which drivers have uncertified logs. You can drill down to see which dates have uncertified logs for a specific driver. Unidentified Hours Report	X
Category - Journey Management reports		X
Category - List reports		X
Category - Materials handling reports		X
Category - MiX satellite communications reports		X
Category - Movement reports		X
Category - Pre Production		X
Category - RAG reports		X
Category - Risk management		X
Category - Rovi reports		X
Category - Scoring reports		X
Category - Tax reports		X
Category - Trailer reports		X
Category - Trip reports		X
Dashboards		X
Event Analyser	Access = Can view Event Analyser module and queries. Create = Add query button available. Update = Can classify the events once query has been executed. Delete = Can remove a query from the landing page. The permission is available on site level and higher.	X	X	X	X
Location analyser		X
MiX Insight Agility - Journey Management Cube		X
MiX Insight Agility – Insight Cube		X
MiX Insight Agility – PowerBI Desktop		X
Subscriptions - Administrate subscriptions	Allows you to edit subscriptions created by any user in the organization, not just your own.	X
Subscriptions - Bulk edit subscriptions		X

Jobs & Messaging		Access	Create	Update	Delete
Default options		X		X
Instant messaging	This is used in conjunction with Task Management app only.	X	X	X	X
Jobs and messages	This is used with a MiX Rovi only.	X	X	X	X

Journey Management		Access	Create	Update	Delete
Journey cancel - Approved journeys		X
Journey monitoring		X
Journey post approval plan change		X
Journeys		X	X	X	X
Libraries		X
Libraries - Cargo types		X	X		X
Libraries - Risk assessment template questions		X	X	X	X
Libraries - Route management		X	X	X	X
Save route on journey capture		X

Maintenance	Access to the EasyCheck module for vehicle inspections.	Access	Create	Update	Delete
Inspection step library	Access - open and see the steps. Create - an add button to create inspection steps. In the inspection template when selecting steps, a link to create additional steps. Update - make changes to a step. Delete - remove an inspection step from the library.	X	X	X	X
Inspection templates	Access - open existing inspection templates (including the steps) but not make any changes. Create - create new templates or duplicate existing ones. Creating templates includes selection of steps, but not creation or editing of steps. Update - make changes to existing templates (excluding the default templates), including changing the selection of steps. Delete - delete an inspection template. This would mean that the template is no longer available on the EasyCheck application. NOTE: The Inspection step library and Inspection templates permissions are linked. If one is selected, the other will automatically be selected and if one is unchecked, the other will be deselected.	X	X	X	X
Inspection templates - Assign to assets		X		X
Inspection templates - Organization settings		X		X
Maintenance notifications	View and manage maintenance notifications.	X	X	X	X
Maintenance status		X		X
Maintenance status - Mark as resolved		X

Mobile Device Admin		Access	Create	Update	Delete
Mobile device admin - Commissioning	Only on the ZA server.	X		X

Notifications		Access	Create	Update	Delete
Notifications		X	X	X	X
Notifications - Administrator		X
Notifications - Bulk edit		X
Notifications - Export		X
Notifications - Import		X
Notifications - SMS	Without this you cannot set an event notification to go out via SMS, only email.	X	X	X	X

Operations		Access	Create	Update	Delete
Aggregator	No longer used.	X		X
Airtime Management		X		X
Data Centre Administration		X
Data Centre Administration - Asset Search		X
Data Centre Administration - Custom data feeds		X
Data Centre Administration - Maintenance management		X
Data Centre Administration - Manage API accounts	No longer used - this managed FM Web's external API.	X
Data Centre Administration - Manage API roles	No longer used - this managed FM Web's external API.	X
Data Centre Administration - Manage client applications	Used to Manage MiX Integrate client keys and secrets.	X
Data Exclusion		X
Data query tool		X
Database administration - Activate/Deactivate organisation		X
Database administration - Authentication settings	Allows you to edit the MyMiX driver authentication tab in the driver's profile.	X		X
Database administration - Data retention	Enables you to choose how long data must be kept, for now video retention specifically.	X
Database administration - HOS settings		X		X
Database administration - Insight settings		X		X
Database administration - Map settings		X		X
Database administration - Measurement settings		X		X
Database administration - Migrate organization		X
Database administration - MyMiX settings		X		X
Database administration - Organization details		X		X
Database administration - Organisation structure		X	X	X	X
Hours of Service - Manage US DOT audit		X
MiX Legacy ID Manager		X
Organization goals		X		X
Organization settings		X
Organization settings - Additional asset detail fields		X		X
Organization settings - Additional driver detail fields		X		X
Organization settings - Company details		X		X
Organization settings - Cost data categories		X		X
Organization settings - Custom branding	Allows you to create a new URL and upload a customer logo for the menu bar and login page.	X
Organization settings - Decommissioned		X		X
Organization settings - Driver defaults		X		X
Organization settings - Dutch tax		X		X
Organization settings - Event Analyzer settings	Custom functionality to select which events will be available in Event Analyzer (also custom) and to configure the type and code of events.	X
Organization settings - Event video cap	Allows you to edit event video cap threshold on the Video data management page.	X		X
Organization settings - Iridium airtime contracts		X		X
Organization settings - Journey management policies and workflows		X	X	X	X
Organization settings - Journey management settings		X		X
Organization settings - Licence reminder defaults		X		X
Organization settings - MiX Talk		X		X
Organization settings - MyMiX scoring		X		X
Organization settings - O L - customer	No longer applicable	X
Organization settings - Roadspeed events		X		X
Organization settings - Roadworthy reminder defaults		X		X
Organization settings - Scoring		X		X
Organization settings - Service reminder defaults		X		X
Organization settings - Standard scoring		X		X
Organization settings - State line crossing events (IFTA)		X		X
Organization settings - Time entry extension		X		X
Organization settings - Tracking options		X		X
Organization settings - Trip classification		X		X
Organization settings - Video settings	Allows you to access and edit the Video settings page under Organization settings.	X		X
System logs		X
Time Entry - Time Approvers Integration		X

Scheduler		Access	Create	Update	Delete
Backdoor strings		X
Download schedules		X		X
Transfer schedules		X
Upload schedules		X		X
Upload schedules - Force upload		X
Upload schedules - Upload in trip		X

Support Tools		Access	Create	Update	Delete
Auditing		X
Auditing - Assets		X
Auditing - Driver logs		X
Error Log		X
Health Check	To see the Health status of assets - OBC, peripherals.	X	X		X
Standard commands		X	X		X
Sync Log		X	X
Tabs beacons positions		X

Task Management		Access	Create	Update	Delete
Task steps		X	X	X	X
Tasks		X	X	X	X
Templates		X	X	X	X
Worker - force logout		X
Worker - tracking		X
Workers		X	X	X	X

Tracking		Access	Create	Update	Delete
Access all Live share links	Allows you to see all the links created.
EasyTrack		X
Historical tracking		X
Historical tracking - Trip classification		X
Live & historical tracking - Active and passive positions map layers		X
Live tracking		X
Live tracking - Advanced commands to mobile device	Powerfleet support access to reboot and/or clear accelerometer calibration supported on MiX 4000 and MiX 6000 devices only. Note MiX 6000 does not support the calibration clearing.	X
Live tracking - Commands to mobile device		X
Live tracking - Commands to mobile device for MiX2000		X
Live tracking - Plot route		X
Live tracking - Request current position		X
Live tracking - Start active tracking		X
Live tracking - Start satellite tracking		X
Live video streaming - legacy
Manage Live share links	Create and delete live sharing links, but can only see those created by themselves.
Manage locations		X	X	X	X
Manage locations - Import & export		X
Manage locations - Multi-delete locations		X
Manage road hazards	Used for Journey management.	X	X	X	X

Unity	To hide/display menu's in Unity.	Access	Create	Update	Delete
VisionAI 360 - Device Management	Show the menu in Unity and give access to the S17 Maintenance module within FTCloud directly in the Unity portal. The user still needs to be a configured subscriber to S17.	X
Vision AI 360 - Insights		X
VisionAI 360 - Operations		X
VisionAI 360 - SafeGuard	Show the SafeGuard menu in Unity and give access to the module directly in Unity. You have to be a configured subscriber.	X

User Admin		Access	Create	Update	Delete
Reports - Permissions by user		X
Reports - Role availability		X
Reports - Users by role		X
Reports - Users by security group		X
Roles		X		X	X
Security groups		X		X	X
Users		X	X	X	X
Users - Disable user
Users - Impersonation		X
Users - Import users		X
Users - MiX Integrate request limit	Edit user allows you to change any user setting but not the MiX Integrate bucket size. To do that you need this permission.	X
Users - Multifactor authentication	To enable multifactor authentication for users.	X
Users - Update user level permissions		X

Video gallery		Access	Create	Update	Delete
Live video streaming	Allows you to access Live streaming page.	X
Video gallery	Allows you to access Video gallery page.	X

Access permissions

RECOMMENDED READING

Related articles