User Types and Permissions

LytxOne supports multiple user role types in the Fleet Portal, each with specific permissions and scopes. Built-in roles cover the most common use cases, and custom roles can be created to tailor access to your organization's specific needs. This ensures that administrators, managers, and other users have the right level of access for their responsibilities without exposing unnecessary features.

Fleet App User Roles Overview

Built-in Roles

• Admin – Full access across the platform, including fleet settings, Tags settings, user management, and all data.
• Manager – Oversight of specific branches, groups, or vehicle assignments. Can manage vehicles, safety, and maintenance within their scope but cannot change fleet-wide settings.
• User –  Limited access for viewing and reporting. Can view assigned vehicles, run reports, and monitor activity but cannot make changes.
• Installer – Access to installation tools and configuration steps only, with no data access.

Custom Roles

Administrators can create custom roles with granular permissions tailored to their organization's needs. Each custom role can be configured with View, Edit, Manage, and Download permissions across individual areas of the platform. Custom roles can be based on an existing built-in role or built from scratch. To learn more, see Roles & Permissions Settings.

Built-in Role Permissions

Tag-Based Restrictions

• Managers and Users are always restricted to data that matches the tags assigned to their account.
• Even if a Manager has full access to a module, they will only see data for vehicles, drivers, and assets that share their assigned tags.
• Custom roles follow the same tag-based visibility rules — permissions define what actions a user can perform, while tags control what data they can see.

Note
Learn more in the Tag-based Access Restriction.

Best Practices

• Assign Admin only to account owners or senior leadership.
• Use Managers to oversee regional or departmental operations, controlled by tag-based scopes.
• Limit Users to reporting and monitoring roles to reduce the risk of accidental changes.
• Use Custom Roles when built-in roles don't precisely match your operational needs, for example, granting a team access to Maintenance and Reporting only, without Safety Center or Fleet Settings.

FAQ's

What is the Installer role for?

The Installer role is used for hardware setup only. Access is limited to device activation and installation tools.

Can Installers see fleet data?

No. Installers cannot access trips, events, reports, vehicles, or any operational data.

Is Installer access temporary?

No. Installer access remains active until an Admin manually deletes the user.

Can Installers be reused for future installs?

Yes. As long as the Installer account remains active, it can be used for multiple installations.

Can Installers access the platform outside of install tools?

No. Installers are restricted to installation workflows only.

Can an Installer accidentally access trip history or events?

No. Installer permissions are fully restricted to prevent exposure to fleet data.

What can Standard Users do?

Users have view-only access to dashboards, trips, events, vehicles, and videos. They cannot edit or configure settings.

Can Users make changes?

No. Users cannot configure settings, trigger actions, or manage data.

Can a User be upgraded to Admin?

Yes. An Admin can change a User’s role to Admin at any time.

What if a Standard User needs to perform actions temporarily?

They must be promoted to a role with the required permissions. There is no temporary override for elevated permissions.

What can Managers do?

Managers can manage users, vehicles, maintenance, safety, and reports within their assigned scope.

Can Managers see all fleet data?

No. Managers only see data that matches their assigned tags, even if they have access to full modules like the Safety Center.

Can a Manager create or edit maintenance schedules?

Yes. Managers can create and manage maintenance schedules within their scope.

Can a Manager be downgraded to User?

Yes. An Admin can adjust roles at any time.

Can there be more than one Admin?

Yes. Accounts can have multiple Admins, depending on the organization’s needs.

Can Admins limit their own access?

No. Admins always have full access to the account. If reduced access is needed, they should be downgraded to Manager or User.

Can Admins edit or delete other Admins?

Yes. Any Admin can manage other Admins, including editing roles or deleting accounts.

Are Admins affected by tags?

No. Admins always have account-wide access, regardless of tags.

How do tags affect what Managers and Standard Users can see?

Both roles are restricted by tags. They will only see vehicles, drivers, trips, and events that share the same tags assigned to their role. If a Manager or User does not have any tags assigned, they will automatically see all data in the account.

Can tags be updated after a user is created?

Yes. Admins can edit user tags at any time to change the scope of data they can access.

What happens if no tags are assigned?

Managers and Standard Users without tags will see all fleet data. Learn more in the Tag-based Access Restriction article.

What are custom roles?

Custom roles allow administrators to define tailored permission sets beyond the built-in options. Each custom role can be configured with View, Edit, Manage, and Download permissions per area of the platform. To learn more, see Roles & Permissions article.

Can a custom role be assigned to multiple users? 

Yes. Once created, a custom role can be assigned to any number of users via the Manage Roles option in the Users page.

Can a custom role be edited after it is assigned to users? 

Yes. Editing a custom role will update the permissions for all users currently assigned that role.