Roles and Permissions

Important: Admin roles is currently in beta, and while we take care to test every part, it's still new! Contact support to request access to beta features, or to report anything (including feedback).

Overview

Roles determine what each user can access and do in the FUYL Portal and FUYL Kiosk. Users synced through SSO or provisioning start with no role, which lets them sign in at the FUYL Kiosk and use the workflows they're authorized for. A user can only be assigned one role. A new assignment replaces the original (moving an Admin to Coordinator removes their Admin access).

Roles are managed in the FUYL Portal under Settings , on two pages:

Admins, which lists everyone with the Admin role, and is where new users are invited
Roles, which lists every role, how many users hold it, and what it allows

Choosing a role

Role	What it covers
Admin	Everything, including SSO, provisioning, kiosk configuration, station firmware and assigning roles.
Coordinator	Creating and editing workflows, deployments and single use tasks, allocating workflows to kiosks, starting and ending charging sessions, and ending loans.
Technician	Loading and collecting devices, ending loans, opening bays, restarting stations and managing automations.
Viewer	Read-only access to settings, workflows, stations, bays and loan history. A Viewer can't open bays.
No role	Signing in at the FUYL Kiosk to use the workflows they're authorized for, for example borrowing a device or charging one. No access to the FUYL Portal or the Kiosk's Admin menu.

Assign each user the lowest role applicable to their needs, and adjust if necessary.

Every permission each role holds is listed in Permissions by role.

Assign a role

Roles can be assigned to users already present in FUYL. Assigning a role replaces any previously held, and removing a role returns a provisioned user to no role. Invited users lose access entirely.

Open Roles In the FUYL Portal, select Settings > Roles .
Select the role Existing holders of this role are displayed.
Assign the role Select Assign role, search for the user by name or email, then select Assign.

To remove a role, select the trash icon next to the user's name. The Admin role can also be assigned and removed from Settings > Admins , and an Admin can't unassign themselves.

Give a role to someone who isn't a user

Most users arrive through SSO and provisioning (see Users and Groups). Someone who isn't in the identity provider, for example a contractor, can still be given a role, but has to be invited as an Admin first.

Important: Invitations expire after 30 days, and invited users always begin as Admins. If they need lower access, assign their role straight after sending the invite.

Open Admins In the FUYL Portal, select Settings > Admins .
Enter their email Select Assign user, and type their email address.
Send the invite Select Invite new user, check the email address, then select Invite user.
Assign their role Open the role they need under Settings > Roles , and assign it to them.

If an invitation expires, send a new one the same way.

Permissions by role

Account and security

Permission / Role	Admin	Coordinator	Technician	Viewer
View users and groups	Yes	Yes	Yes	Yes
View SSO status	Yes	No	No	Yes
View directory sync status	Yes	No	No	Yes
Edit account language, region and timezone	Yes	No	No	No
Configure SSO	Yes	No	No	No
Configure directory sync	Yes	No	No	No
Assign and unassign roles	Yes	No	No	No

Kiosks and stations

Permission / Role	Admin	Coordinator	Technician	Viewer
View kiosks, stations and bays	Yes	Yes	Yes	Yes
Create site configuration	Yes	Yes	Yes	No
Initial setup and station connection	Yes	Yes	Yes	No
Open bays	Yes	Yes	Yes	No
Restart stations	Yes	Yes	Yes	No
Allocate workflows to kiosks	Yes	Yes	No	No
Edit kiosk login method	Yes	No	No	No
Edit device ID configuration	Yes	No	No	No
Edit kiosk navigation labels	Yes	No	No	No
Update station firmware	Yes	No	No	No
Remove stations	Yes	No	No	No
Edit station configuration	Yes	No	No	No

Workflows and automations

Permission / Role	Admin	Coordinator	Technician	Viewer
View workflows	Yes	Yes	Yes	Yes
View automations	Yes	Yes	Yes	Yes
Create, edit and delete automations	Yes	Yes	Yes	No
Create, edit and delete workflows	Yes	Yes	No	No

Secure charging and loans

Permission / Role	Admin	Coordinator	Technician	Viewer
View charging sessions	Yes	Yes	Yes	Yes
View loan devices	Yes	Yes	Yes	Yes
Load and remove devices	Yes	Yes	Yes	No
End loans	Yes	Yes	Yes	No
Make devices available	Yes	Yes	Yes	No
View loan history	Yes	Yes	No	Yes
Start and end charging sessions	Yes	Yes	No	No

Repairs

Permission / Role	Admin	Coordinator	Technician	Viewer
View repairs	Yes	Yes	Yes	Yes
Load devices	Yes	Yes	Yes	No
Collect devices	Yes	Yes	Yes	No

Deployments

Permission / Role	Admin	Coordinator	Technician	Viewer
View deployments	Yes	Yes	Yes	Yes
Load devices	Yes	Yes	Yes	No
Add devices to and remove them from inventory	Yes	Yes	Yes	No
Create and withdraw deployments	Yes	Yes	No	No

Single use

Permission / Role	Admin	Coordinator	Technician	Viewer
View single use tasks	Yes	Yes	Yes	Yes
Load tasks	Yes	Yes	Yes	No
Collect tasks	Yes	Yes	Yes	No
Create and withdraw single use tasks	Yes	Yes	No	No

FUYL Kiosk

Every role can open the Admin menu on the FUYL Kiosk, and the options in it depend on the role.

Option / Role	Admin	Coordinator	Technician	Viewer
Collect device	Yes	Yes	Yes	View only
View tower	Unlock bays^* and change a bay's workflow	Unlock bays^* and change a bay's workflow	Unlock bays^*	View only
View charging sessions	Unlock bays^*	Unlock bays^*	Unlock bays^*	View only
Drop off repairs	Yes	Yes	Yes	View only
Load devices	Yes	Yes	Yes	No
Allocate workflows	Yes	Yes	No	No
Diagnose tower	Yes	No	Yes	No

* Note: Unlocking a charging bay opens the door for the user, but doesn't start or end their charging session.

Anyone with a role can sign in to the Admin menu on the Kiosk itself, or on their own device by scanning the QR code or entering the URL and confirmation code. This doesn't depend on the login method set for users.

Each workflow's Assisting with article covers what the Admin menu does for that workflow, for example Assisting with Secure Charging.