Roles and access control¶
FSM Navigator uses role-based access control (RBAC) to ensure every team member sees only the features and data they need. Each user can be assigned one or more roles, and those roles determine their permissions across the platform.
Available roles¶
| Role | Description | Typical user |
|---|---|---|
| Owner | Full access to all features, settings, billing, and team management | Company administrator, business owner |
| Manager | Read-only oversight across jobs, KPI dashboard, reports, and audit logs. Cannot create or modify records. Can invite Dispatchers, Technicians, and Inventory Managers. No company settings, billing, inventory, or asset access | Operations director, regional manager, ops lead |
| Dispatcher | Manages jobs, schedules, customers, and coordinates technicians | Office manager, scheduler |
| Technician | Views and completes assigned jobs, logs time, adds photos and notes | Field worker, service engineer |
| Inventory Manager | Manages parts catalog, warehouses, stock levels, and purchase orders | Stock controller, warehouse lead |
| Asset Manager | Manages equipment records, maintenance schedules, and asset tracking | Equipment coordinator, fleet manager |
Plan availability
- Owner, Dispatcher, Technician — available on every plan.
- Manager — available on Pro and Enterprise. Manager is a read-only oversight role: viewing jobs, KPI dashboards, reports, and audit logs. Manager does not create, edit, or assign — those operations remain with Owner and Dispatcher.
- Inventory Manager and Asset Manager — available on Enterprise plans only.
Permission matrix¶
The table below shows what each role can access. means full access, means view-only, and means no access.
Jobs and scheduling¶
| Capability | Owner | Manager | Dispatcher | Technician | Inventory Mgr | Asset Mgr |
|---|---|---|---|---|---|---|
| View all jobs | ||||||
| View assigned jobs | ||||||
| Create jobs | ||||||
| Edit jobs | ||||||
| Update job status | ||||||
| Assign technicians | ||||||
| Dispatch board |
Customers¶
| Capability | Owner | Manager | Dispatcher | Technician | Inventory Mgr | Asset Mgr |
|---|---|---|---|---|---|---|
| View customers | ||||||
| Create/edit customers | ||||||
| Bulk import |
Invoicing¶
| Capability | Owner | Manager | Dispatcher | Technician | Inventory Mgr | Asset Mgr |
|---|---|---|---|---|---|---|
| View invoices | ||||||
| Create/edit invoices | ||||||
| Record payments |
Inventory (Enterprise)¶
| Capability | Owner | Manager | Dispatcher | Technician | Inventory Mgr | Asset Mgr |
|---|---|---|---|---|---|---|
| View stock levels | ||||||
| Manage parts catalog | ||||||
| Transfer stock |
Assets (Enterprise)¶
| Capability | Owner | Manager | Dispatcher | Technician | Inventory Mgr | Asset Mgr |
|---|---|---|---|---|---|---|
| View assets | ||||||
| Create/edit assets | ||||||
| Transfer assets | ||||||
| Depreciation data | ||||||
| Maintenance schedules |
Settings and administration¶
| Capability | Owner | Manager | Dispatcher | Technician | Inventory Mgr | Asset Mgr |
|---|---|---|---|---|---|---|
| Company settings | ||||||
| Billing & subscription | ||||||
| Invite / manage users | ||||||
| View reports | ||||||
| Audit logs |
How to read the icons
full access (read + write) read-only no access. Manager is intentionally a read-only oversight role — most cells show for visibility without editing. Manager can invite Dispatchers, Technicians, and Inventory Managers, which is why the "Invite / manage users" row shows (the invitation flow itself is the user-management surface available to Manager).
Assign a role¶
Roles are assigned when you invite a new user or update an existing user's profile.
When inviting a new user¶
- Go to Users and click Invite User.
- Enter the user's email address.
- Select a role from the dropdown.
- Click Send Invitation.
Change an existing user's role¶
- Go to Users and click on the user's name.
- Select a new role from the dropdown.
- Click Save.
Only Owners can change roles
Dispatchers can invite users but cannot change existing users' roles.
Best practices¶
- Follow least privilege — assign each user the most restrictive role that still lets them do their job.
- Use Dispatcher for office staff — give them job and customer access without billing or settings permissions.
- Limit Owner accounts — keep the number of Owners small to reduce your security surface.
- Review roles regularly — when team members change positions, update their role promptly.
Frequently asked questions¶
Can a user have multiple roles?
Yes. A user can hold more than one role at the same time. Their effective permissions are the combination of all assigned roles.
What happens when I downgrade from Enterprise?
Users with Inventory Manager or Asset Manager roles retain their accounts but lose access to inventory and asset features. You can reassign them to Dispatcher or Technician.
Users with the Manager role keep their oversight scope on Pro — read-only access to jobs, the KPI dashboard, reports, audit logs, and team invitations remain available. On Free, the Manager role's scope is unavailable; reassign to Dispatcher.
Related guides¶
- Security overview — how FSM Navigator protects your data
- Multi-factor authentication — add a second layer of account protection
- Inviting users — add team members and assign roles
- Roles and permissions (team) — team management perspective