Overview
3 Roles, permissions and your license
What a person can see and do depends on two things: the permissions on their account and the features in your company's license. If a menu item described in this guide is missing, one of the two is the reason.
Roles#
| Role | What it means |
|---|---|
| Super User | The highest role, held by the built-in administrator account. Has every permission, sees every asset and is the only role that can open the Audit log. A Super User can give this role to other accounts. |
| Admin | Sees all assets. Can do exactly what the permissions ticked on the account allow. |
| User | Works only with the assets assigned to the account, within its permissions. |
| Authority · Recycler · Repairer | Partner roles for the Digital Product Passport. They read, update and block products of assigned DPP assets, and see or edit only the fields whose data audience includes their role. |
Permissions#
On the user form permissions are grouped by area: Products, Assets, Presets, Lookups, Workflows, AI, Users, Settings, License, Integrations and Notifications management (see Users and access). Granting a write permission also grants the matching read permission. The most important ones:
| Group | Permissions |
|---|---|
| Products | Read · Write · Update · Delete · Block · Unblock products; read valid and invalid verifications; read/write bulk operations; read/write fraud alerts |
| Assets, presets, lookups | Read · Write assets, Delete assets; Read · Write presets; Read · Write lookups |
| Workflows | Read · Write workflows; Write workflow templates; Read audit events |
| AI | Generate AI fields, template, recommendations and workflows; Use AI analysis; Use AI assistant; Read customer questions |
| Administration | Read · Write users; Read · Write settings; Write license; Manage ERP connections; Read notifications |
License features#
Your license sets limits (users, assets, tags, barcodes, AI tokens, document storage…) and switches on optional features. Throughout this guide, features that need a license option are marked with a License feature chip.
| Feature | What it unlocks |
|---|---|
| Bulk write | Multiple mode for writing tags and generating barcodes, Bulk operations, ERP connections |
| Update records | Editing product values after creation |
| Geolocation analytics | Country of each scan, Geo map, country rules in templates and fraud detection |
| Device info analytics | Device, brand, model and OS of each scan |
| Fraud detection | Fraud alerts, fraud settings, the "On fraud detected" workflow trigger |
| Workflows · Asset forms | Workflow builder and runs · forms on the verification page |
| AI · AI analysis · AI assistant · Customer AI | AI generators · questions over your data · the assistant in the admin panel · AI answers on the verification page and the Customer questions page |
| Product documents | Document library and documents on the verification page |
| Product lookup | Filling GS1 data from a GTIN when creating an asset |
| White-label branding | The Branding page: your own name, logos, colors and links |
| Mobile applications | The mobile app, sign-in by QR code, tag writing from a phone |
Your license may also restrict which carrier types (NTAG 424, NTAG 215, EM4425, Barcode) you can use. The License page shows your license status, dates, limits and current usage; ask your administrator which features are included.