Role hierarchy
The platform defines nine standard roles, organized into three account tiers — Client, Partner, and Enterprise (your tenant’s own staff). Each tier has the same three levels, from lowest to highest privilege:
- Superauditor — read-only access to everything visible at that tier.
- Admin — full read/write access within that tier’s scope.
- Superadmin — full read/write access within that tier’s scope; at the Enterprise tier, superadmin bypasses permission checks entirely and has unrestricted access across the whole platform.
Scope widens with tier: a Client role only sees its own account, a Partner role sees its own account plus the clients under it, and an Enterprise role sees every partner and client on the tenant.
Permission summary
Most day-to-day features — Dashboard, Analytics, Stations, Locations, Private Drivers, Authorizations/RFID Cards, Tariffs, Charging Profiles, Load Balancing, and User Management — follow one rule: every tier has full read/write access through its admin and superadmin roles, and that tier’s superauditor sees the same data read-only.
A smaller set of features breaks from that pattern:
| Feature | Client | Partner | Enterprise |
|---|---|---|---|
| Map | Read-only | Read-only | Read-only |
| Driver Invoices | View & download | View & download | View & download |
| Manage Clients | Not available | Full | Full |
| Manage Partners | Not available | Not available | Full |
| Public Drivers | Not available | Not available | Superadmin only |
| Subscription Invoices & Plans | Read-only | Full | Full |
| Company Settings | Not available | Not available | Full |
“Full” follows the same admin/superadmin-vs-superauditor split as the general rule above. Two rows are narrower exceptions: superauditor access to Driver Invoices is view-only, without download, and Public Drivers is available only to the single top Enterprise role (superadmin), and only where your tenant has that feature enabled.
For how tier and role also control what appears in the sidebar, see section 0.2.