Roles and permissions

DynaCargo uses role-based access control (RBAC). Each user has a role; each role grants a set of permissions. You can also grant or revoke individual permissions per user for fine-grained control.

Standard roles

Role	Intended for	Default capabilities
Owner	Account creator / company principal	Full access to everything. Only role that can transfer ownership.
Admin	Senior operations or back-office staff	User management, all analytics, full fleet and dispatch, all invoicing.
Operator	Day-to-day dispatch and fleet ops	Fleet management, dispatch, jobs / loads. Limited analytics, no user management.
Driver	A company user assigned to trips	The trips assigned to them, where they alone can update status and capture proof of delivery.
Viewer	Read-only stakeholders (e.g. accountants, exec sponsors)	Read across analytics, jobs, invoices. No writes.
Member	Default for new sign-ups	Minimal — typically just their own profile and the public feed until promoted.

Your organisation may have additional custom roles (Tier-1 dispatcher, warehouse manager, etc.).

Permission categories

Permissions are namespaced by feature area. Examples:

• members:read, members:manage
• fleet:vehicles:read, fleet:vehicles:write
• fleet:dispatch:read, fleet:dispatch:write
• analytics:read:spend, analytics:read:fulfillment, analytics:read:performance, analytics:read:warehouse, analytics:read:all
• analytics:export:spend, analytics:export:fulfillment, … analytics:export:all
• analytics:filter:region, analytics:filter:transporter, analytics:filter:timerange
• invoices:read, invoices:write, invoices:approve
• compliance:read, compliance:manage
• audit:read

The :all suffix on read or export permissions grants the entire subgroup.

Assigning permissions

1. Go to Dashboard → Members.
2. Click the user you want to update.
3. Open the Permissions tab.
4. Toggle individual permissions or pick a different role (which replaces the current permission set with the role’s defaults).
5. Save.

Changes take effect on the user’s next page load.

Best practices

• Start with a role, then add or remove individual permissions only if you need to deviate.
• Avoid the Owner role for anyone except the account principal.
• Use Viewer for accountants and exec sponsors — they can see numbers without risking accidental writes.
• Audit periodically — review members quarterly to remove unused accounts and right-size permissions.

Where to learn more

• User management — invite and manage members.
• Audit trails — see what users actually did with their permissions.