Roles in WinTrack
An overview of user roles — admin, CEO, supervisor/dispatcher, driver, and client — and what each role can see and do.
WinTrack relies on role-based access control (RBAC). Each user has a role that determines the screens they reach and the actions they can take. Permissions are enforced on the server at every route and cannot be bypassed from the UI.
Tenant isolation
Every user belongs only to their own company and can never see other companies' data.
Core roles
| Role | Main access |
|---|---|
| Admin | Full management of fleet, users, and settings. |
| CEO | Contract and quotation approvals, general oversight. |
| Supervisor / Dispatcher | Dispatching trips, approving checklists, attaching the Bayan, running operations. |
| Driver | Mobile app — accepting trips, checklists, uploading documents, delivery. |
| Client | Read-only view of the trips and routes linked to them. |
Per-role detail
Admin
Reaches every section of the system: fleet, contracts, routes, trips, maintenance, billing, reports, settings, and users. Can add and edit assets, create users, and assign their roles.
CEO
The role is centered on approvals: signing off on quotations and contracts. Reviews overall performance through reports.
Regional supervisor / dispatcher
The heart of daily operations: dispatches trips to drivers, approves pre-loading checklists, attaches the Bayan, and tracks trip progress.
Driver
Works through the mobile PWA, optimized for offline use. Receives trips, completes checklists, uploads weight documents and delivery photos, and updates trip status. The app supports 8 languages.
Client
A read-only role — the client sees the trips and routes linked to them to track their shipments, with no ability to edit.
Per-user asset scope
Alongside the role, what a user sees of the assets can be restricted via asset groups. For example, scope a supervisor to see only the vehicles of a specific geographic region. When a user's scope is non-empty, every asset outside the group is automatically excluded — across all lists and reports.
Super-admin
A completely separate account (not a regular user) for managing the platform itself: approving companies, billing, and managing admins. Works through its own dashboard.