Roles and Security
Default roles and permissions, subsidiary scoping, credential storage and audit logging.
Last Updated
Every FuelRouteX user belongs to an organization and has a role. Roles decide what a user can see and change, and subsidiaries decide which part of the fleet they can see.
Default Roles
These are the default permissions for each role. Your organization's role setup can adjust them.
| Permission | Tenant Admin | Dispatcher | Accounting | Viewer |
|---|---|---|---|---|
| View fleet, purchases and savings | Yes | Yes | Yes | Yes |
| View settings | Yes | Yes | Yes | Yes |
| Edit trucks and fleet data | Yes | Yes | No | No |
| Change notification settings | Yes | Yes | No | No |
| Upload contract prices | Yes | No | Yes | No |
| Import purchases | Yes | No | Yes | No |
| Change fleet rules and pricing settings | Yes | No | No | No |
| Manage integrations | Yes | No | No | No |
| Invite and manage users | Yes | No | No | No |
| See all subsidiaries and unassigned data | Yes | No | No | No |
Settings Access
- Fleet Rules, Notifications and Pricing: visible to anyone who can view settings; only users with permission to change them can save.
- Office Users: tenant admins only. Other roles do not see this tab.
- Integrations: users who can manage integrations (tenant admins by default).
Subsidiaries
Trucks, purchases and connections belong to a subsidiary. Users see only the subsidiaries they have access to. Data not assigned to a subsidiary is visible only to users with access to all subsidiaries. Data from another organization is never visible.
Users and Sign-In
Users sign in through the FuelRouteX sign-in page. People who belong to more than one organization can switch between them in the app.
Tenant admins manage their organization's users themselves under Settings → Office Users:
- Invite: enter an email address and choose a role. The invitation is sent by email from our sign-in provider and expires after 7 days. Up to 10 invitations can be sent per minute.
- Pending invitations: resend an invitation or revoke it before it is accepted.
- Change role: switch a user between Tenant Admin, Dispatcher, Accounting and Viewer. The new permissions apply right away, without the user signing out.
- Deactivate or reactivate: suspend a user's access to your organization without removing them, and restore it later.
- Remove: take a user out of your organization.
When someone accepts an invitation, they create an account (or use their existing one) and join your organization with the role you chose. To keep every organization manageable, the last tenant admin cannot be removed, deactivated or given another role, and you cannot remove or deactivate yourself. If you need help with your account, email sales@fuelroutex.com.
Integration Credentials
- Integration tokens and webhook signing secrets are encrypted at rest with AES-256-GCM.
- Each stored secret is bound to its organization and connection, so it cannot be reused elsewhere.
- Secrets are never sent back to the browser. The app shows only a masked value with the last four characters.
- New tokens are tested with the provider before they are saved.
- Incoming webhooks are verified by signature and rejected if they are more than 5 minutes old.
Audit Log
FuelRouteX records an audit entry when settings change, when an integration is connected, paused, changed or disconnected, when members or organization details change, and when price sheets or purchases are imported.
File Uploads
Uploaded files are limited to 10 MB. Excel files are checked before they are opened, and oversized or malformed workbooks are rejected. Exported CSV files are protected against spreadsheet formula injection.