User Roles Explained
Understand what each role can do, what they see, and how to assign them.
Role-Based Access Control
Deprixa Plus uses role-based access control (RBAC) powered by Spatie Laravel Permissions. Every user has exactly one role, and each role grants a specific set of permissions that control menu visibility, page access, and allowed actions.
4.1 Super Admin — Platform Owner
Who is the Super Admin?
The person who installed the platform. There is only one Super Admin per installation.
What They See
Everything — all tenants, all modules, all settings, and the SaaS admin panel. No data is hidden from this role.
Key Capabilities
- Manage all organizations (tenants) across the platform
- Create and manage SaaS subscription plans
- View all wallets, invoices, and subscription statuses
- Access system maintenance tools and audit logs
- Apply software updates (OTA)
A Typical Day
Monitor platform health across all organizations, resolve subscription issues, review system logs, and apply software updates when available.
Full Platform Access
The Super Admin bypasses all tenant isolation. They see data from ALL organizations. Assign this role only to the technical owner of the installation.
4.2 Admin — Company Manager
Who is the Admin?
The owner or manager of a courier company — one organization (tenant). Each organization can have multiple Admins.
What They See
All modules within their own organization. Admins cannot see data from other tenants.
Key Capabilities
- Full CRUD on shipments, customers, rates, and billing
- Manage employees and drivers (invite, edit, deactivate)
- Configure all organizational settings (company profile, branches, notifications, security)
- Customize permissions for Employee, Driver, and Customer roles
- View reports, financial summaries, and audit logs
What They Cannot Do
- See other organizations or their data
- Manage SaaS subscription plans
- Access system maintenance or software updates
A Typical Day
Review dashboard KPIs, check pending shipments, assign drivers to manifests, handle billing issues, configure rates, and manage the team.
4.3 Employee — Office Staff
Who is the Employee?
Operations staff handling day-to-day logistics work — warehouse clerks, dispatchers, customer service agents.
What They See
The following modules are available to Employees by default:
- Dashboard
- Shipments
- Tracking
- Warehouse
- Dispatch
- Pickups
- Customers
- Lockers
- Pre-Alerts
- Billing
- Returns
- COD (Cash on Delivery)
- Import
Key Capabilities
- Create and edit shipments
- Process warehouse receipts and scanning
- Manage pickups (create, assign, complete)
- Handle customer accounts (create, edit)
- Process returns and COD collections
- Import shipments from spreadsheets
What They Cannot Do
- Access settings (except view-only for pricing and services)
- Manage users or roles
- View financial reports or export billing data
- Delete customers
A Typical Day
Receive packages at the warehouse, create shipments, process pre-alerts from customers, assign pickups to drivers, and handle returns.
4.4 Driver — Delivery Agent
Who is the Driver?
The person physically delivering packages. Drivers use a simplified dashboard focused entirely on their assigned deliveries and pickups.
What They See
- Driver Dashboard — personal delivery stats (today, this week, this month)
- Assigned Shipments — only shipments in their active manifest
- Assigned Pickups — only pickups assigned to them
Key Capabilities
- View assigned deliveries and route information
- Update shipment status (in transit, delivered, exception)
- Submit proof of delivery (digital signature and photo)
- Send GPS location updates
- Complete assigned pickups with evidence photos
- Download the delivery manifest as a PDF
What They Cannot Do
- Create, edit, or delete shipments
- Access customer records
- View billing, invoicing, or financial data
- Access any settings
- See other drivers' locations or assignments
A Typical Day
Log in, review the list of assigned deliveries, navigate to each destination, update statuses as packages are delivered, capture customer signatures, and mark the route as complete.
4.5 Customer — End Client
Who is the Customer?
The person sending or receiving packages. Customers access a dedicated portal separate from the admin area.
What They See
Customers are redirected to the Customer Portal after login, which includes:
- My Locker — assigned locker code and warehouse address
- Pre-Alerts — announce incoming packages before they arrive
- My Contacts — manage saved recipients and addresses
- Tracking — track shipments by tracking number
Key Capabilities
- Create pre-alerts for incoming packages
- Track shipments in real time
- Manage contacts and recipient addresses
- View locker details and warehouse address
What They Cannot Do
- Access admin areas or operational modules
- View other customers' data
- Manage shipments directly (create, edit, delete)
- Access settings, billing, or reports
Registration
Customers can self-register through the customer portal link (/register/customer/{org-slug}) or be invited by an Admin from Settings → Users.
How to Assign Roles
-
1
Navigate to Settings → Users & Team
Open the Settings menu and select Users & Team from the sidebar.
-
2
Add or Edit a User
Click Add User to create a new account, or click the edit icon on an existing user row.
-
3
Select Role from Dropdown
In the user form, choose the appropriate role from the Role dropdown: Super Admin, Admin, Employee, Driver, or Customer.
-
4
Save
Click Save to apply the changes. The new role takes effect immediately.
No Logout Required
Changing a role immediately updates the user's menu and permissions. The user does not need to log out and back in — changes take effect on the next page navigation.
Custom Permissions
Each role's permissions can be customized per organization. Navigate to Settings → Roles & Permissions to view and toggle individual permissions for the Employee, Driver, and Customer roles.
Permission Groups
Permissions are organized into the following groups:
| Group | Covers |
|---|---|
| Dashboard | View dashboard, KPI cards, activity feed |
| Shipments | View, create, edit, delete, change status, import |
| Dispatch | View dispatch board, create manifests, update routes, access map |
| Warehouse | Access warehouse scanning and receipt processing |
| Customers | Access, create, edit, delete customer records |
| Pickups | View, create, manage, complete pickups |
| Pre-Alerts | View, create, manage pre-alert notifications |
| Lockers | View and manage customer locker assignments |
| Returns | View, create, update return requests |
| COD | View, collect, remit cash-on-delivery payments |
| Reports | View and export operational and financial reports |
| Finance & Billing | View billing, manage invoices, export financial data |
| Settings — General | Company profile, branches, users, roles, notifications, security, audit log |
| Settings — Modules | Shipment statuses, services, pricing, tracking, shipping config, integrations |
Role Comparison Matrix
The table below summarizes what each role can access at a glance. Use this as a quick reference when deciding which role to assign.
✓ = Full access ~ = Limited / scoped ✗ = No access
| Feature | Super Admin | Admin | Employee | Driver | Customer |
|---|---|---|---|---|---|
| Core Modules | |||||
| Dashboard | ✓ | ✓ | ✓ | ~ | ✗ |
| View Shipments | ✓ | ✓ | ✓ | ~ | ~ |
| Create Shipments | ✓ | ✓ | ✓ | ✗ | ✗ |
| Edit / Delete Shipments | ✓ | ✓ | ✓ | ✗ | ✗ |
| Change Shipment Status | ✓ | ✓ | ✓ | ✓ | ✗ |
| Tracking | ✓ | ✓ | ✓ | ✓ | ✓ |
| Operations | |||||
| Dispatch | ✓ | ✓ | ✓ | ~ | ✗ |
| Warehouse | ✓ | ✓ | ✓ | ✗ | ✗ |
| Customers | ✓ | ✓ | ✓ | ✗ | ✗ |
| Pickups | ✓ | ✓ | ✓ | ~ | ✗ |
| Pre-Alerts | ✓ | ✓ | ✓ | ✗ | ✓ |
| Lockers | ✓ | ✓ | ~ | ✗ | ~ |
| Returns | ✓ | ✓ | ✓ | ✗ | ✗ |
| COD (Cash on Delivery) | ✓ | ✓ | ✓ | ✗ | ✗ |
| Import | ✓ | ✓ | ✓ | ✗ | ✗ |
| Finance & Reports | |||||
| Billing & Invoicing | ✓ | ✓ | ~ | ✗ | ✗ |
| Reports | ✓ | ✓ | ✗ | ✗ | ✗ |
| Administration | |||||
| Settings | ✓ | ✓ | ✗ | ✗ | ✗ |
| User Management | ✓ | ✓ | ✗ | ✗ | ✗ |
| Roles & Permissions | ✓ | ✓ | ✗ | ✗ | ✗ |
| SaaS Admin Panel | ✓ | ✗ | ✗ | ✗ | ✗ |
| Multi-Tenant Management | ✓ | ✗ | ✗ | ✗ | ✗ |
| System Maintenance | ✓ | ✗ | ✗ | ✗ | ✗ |
Partial Access (~)
Driver: sees only their assigned shipments, their own dispatch route, and their assigned pickups. Customer: sees only their own shipments and locker. Employee (Billing): can view invoices but cannot manage or export them.