User Roles and Permissions – CARRIYO

Users can be assigned to a single Merchant or multiple Merchants under an account ensuring data access control for multi-merchant organizations.

Users can have the following roles:

Admin: can manage shipments, carrier accounts, service levels, routing rules, users, webhooks, locations, communications and custom attributes.
Account Manager: can change Account Level Rules, SLA and Notifications for all merchants.
Manager: can change automation rules, SLA and Notifications at brand level.
Operator: can manage shipments & returns but can only view carrier accounts and routing rules.
IT Manager: can only access connectors and webhooks and client app under Integrations.
Viewer: can only view information but cannot create or update information.

Refer to the table below for a detailed view on user roles & associated permissions.

To manage the roles and permissions of a user you must be an Admin. To change the roles and permissions of a user account simply go to Settings on the navigation menu and select Users. Then select any user to make changes to its assigned role and assigned Merchants, or select CREATE at the top of the screen to create a new user. Refer to this article to learn how to create, edit and manage users.

Account Level Role

	Admin	Account Manager	Manager	Operator	IT Manager	Viewer
Account Level Role	Yes	Yes	No	No	No	No

Settings

	Admin	Account Manager	Manager	Operator	IT Manager	Viewer
Settings - Account	Full Access	No Access	No Access	No Access	No Access	No Access
Settings - Email Domain	Full Access	No Access	No Access	No Access	No Access	No Access
Settings - Downloads	Read Access	Read Access	Read Access	Read Access	Read Access	Read Access
Settings - Custom Domain	Full Access	No Access	No Access	No Access	No Access	No Access
Settings - Locations	Full Access	Full Access	Read Access	Read Access	Read Access	Read Access
Settings - Notifications	Full Access	Full Access	Full Access	No Access	No Access	No Access
Settings - Reason Codes	Full Access	Read Access	Read Access	Read Access	Read Access	Read Access
Settings - Returns	Full Access	Full Access	Full Access	No Access	No Access	No Access
Settings - Shipment Attributes	Full Access	Read Access	Read Access	Read Access	Read Access	Read Access
Settings - Users	Full Access	No Access	No Access	No Access	No Access	No Access

General

	Admin	Account Manager	Manager	Operator	IT Manager	Viewer
Alerts	Read Access	Read Access	Read Access	Read Access	Read Access	Read Access
Home	Read Access	Read Access	Read Access	Read Access	Read Access	Read Access
Control Tower	Read Access	Read Access	Read Access	Read Access	Read Access	Read Access
Reports	Read Access	Read Access	Read Access	Read Access	Read Access	Read Access

Shipping

	Admin	Account Manager	Manager	Operator	IT Manager	Viewer
Shipments - Forward & Reverse	Full Access	Full Access	Full Access	Full Access	Read Access	Read Access
Shipment System Logs	Read Access	Read Access	Read Access	Read Access	Read Access	No Access
Shipments - Manifests	Full Access	Full Access	Full Access	Full Access	Read Access	Read Access
Shipments - Service Levels	Full Access	Full Access	Full Access	Read Access	Read Access	Read Access

Carriers

	Admin	Account Manager	Manager	Operator	IT Manager	Viewer
Carriers - Accounts	Full Access	Full Access	No Access	No Access	No Access	No Access
Carriers - Capacity	Full Access	Full Access	No Access	No Access	No Access	No Access
Carriers - Network	Full Access	Full Access	No Access	No Access	No Access	No Access
Carriers - Costing	Full Access	Full Access	No Access	No Access	No Access	No Access

Shipping & Customer Management

	Admin	Account Manager	Manager	Operator	IT Manager	Viewer
Automations	Full Access	Full Access	Full Access	Read Access	Read Access	Read Access
Notifications	Full Access	Full Access	Full Access	No Access	No Access	No Access
CX Apps	Full Access	Full Access	Full Access	No Access	No Access	No Access
Returns	Full Access	Full Access	Full Access	Full Access	Read Access	Read Access

Integrations

	Admin	Account Manager	Manager	Operator	IT Manager	Viewer
Integration - API Access	Full Access	No Access	No Access	No Access	No Access	No Access
Integration - API Client App	Full Access (with READ ACCESS to INTERNAL scopes in CLIENT APP)	No Access	No Access	No Access	Full Access (with READ ACCESS to INTERNAL scopes in CLIENT APP)	No Access
Integration - Connectors	Full Access	No Access	No Access	No Access	Full Access	No Access
Integrations - Webhooks	Full Access	Read Access	Read Access	No Access	Full Access	No Access

Retrigger Webhooks

	Admin	Account Manager	Manager	Operator	IT Manager	Viewer
Retrigger Webhooks	Read Access	Read Access	Read Access	No Access	Read Access	No Access