Main user roles
Admin – superuser that has full unlimited access to the whole TrackinT server (Tracking in Time).
Manager – user with extended capabilities allowing him to manage his subset of users and register new ones.
User – ordinary user that can manipulate any of his own objects and add new ones.
Limited user roles
Readonly user – user that cannot add/edit/remove anything in the system. He can only monitor his objects. Can be used for public/embedded access to Traccar.
Device readonly user – ordinary user with a restriction on device manipulation. Other objects can be edited without limits.
Device limit – the limit for number of devices that user can have. User cannot add devices more than his device limit.
If device limit is set to -1, it means that the user has no limit on number of devices.
If device limit is set to 0, it means that user cannot add any devices, but he can edit or remove existing ones.
User limit – the limit on number of users that manager can have. Manager cannot add users more than his user limit.
If user limit is set to -1, it means that manager has no limit.
If user limit is set to 0, it means that user is not a manager. The difference between manager and regular user is in their user limit value. Manager has limit not equals to 0.
Only administrator can change these fields.
User created by manager will always have 0 value for both limits.
Newly registered user will have device limit set to -1 or value from server config users.defaultDeviceLimit.
Expiration time – the time after which user cannot login into the system.
Disabled – user cannot login if he is isabled.
User or manager cannot edit these two fields in their own accounts.
Manager can edit these fields for the users he has access to, with one restriction. If manager has expiration time, he cannot set other users expiration timelater than his own.
Also, one important restriction is that only administrator can unlink devices from himself.
Embedded or public view
Start with creating user:
- Register new user
- Make user readonly
- Generate token for the user
Now the user can login using the token in URL.
TRACKING IN TIME as a service
Service administrator can create one manager user for every client, set user limit and device limit according to the subscription. For example, 5 users and 50 devices. He can also set expiration time to limit subscription period.
Client can add 5 users and 50 devices, link devices to users, create and link groups, geofences and everything else within the specified limits.
Manager‘s device limit will work for the whole client because client users can add new devices if only administrator explicitly allowed it.