Permissions and access

How access works

• Your role carries permission codes for the organization (and, where applicable, the group) you have selected in the header.
• The app loads permissions for the current organization and active group context. If you change organization or group, effective permissions can change.
• Some menu entries only appear when your permissions allow that route. If something you expect is missing, your role or current group context may not include it.

Roles & Permission (settings)

Users who are allowed to manage roles can open Setting → Roles & Permission. That area lists roles, supports search, and offers filters (for example scope and status) plus actions your role permits—such as creating or editing a role.

If you cannot open Roles & Permission, ask your organization administrator to adjust your role or to make changes on your behalf.

Access denied in the main panel

When a page is blocked, you may see a panel titled Access denied with the name of the area and a short reason. Typical cases:

• Switch to a valid organization/group before opening this page — Select the correct organization and group in the header switcher (see Groups).
• Switch to a valid organization before opening this page — Pick an organization you belong to.
• Your role does not include the required permission code for this route — You are in the right context but the feature is not enabled for your role. Contact your organization administrator.

Redirects instead of a page

Some screens redirect you (for example back to the dashboard or alerts list) if a direct link is opened without the right permission. If that happens repeatedly, confirm organization/group selection and ask an administrator to review your role.

What to tell your administrator

Include:

• Which screen or menu item you need (for example Fuel Consumption, Group Management, or Assign Alert).
• The organization and group you were using.
• Whether you saw Access denied or were redirected.

Dashboard route guard matrix

The console resolves each URL against route-permissions (see app config ROUTE_PERMISSIONS). Below is the tenant-facing summary; paths inherit downward (for example anything under /dashboard/setting/general-settings/... falls under General Settings).

DashboardRouteGuard checks organization vs group context (accessLevel) before evaluating codes. Individual components may also wrap sensitive controls with CanI for finer rules.

Related

• Groups — switching organization and group.
• How to Use Forms — validation and general form troubleshooting.