Roles and permissions

RushHour controls access with permissions and roles:

• A permission allows one specific thing, such as Create Orders or Users tab - view/edit/add users.
• A role is a named set of permissions, such as Company Dispatcher.
• Each user has one or more roles, and can do anything that at least one of their roles allows.

You give people roles on the Users page. You decide what each role allows on the Roles page. The permissions you choose for a role apply to your company only.

Built-in roles

The Roles page and the user list show role names as they are stored, such as COMPANY_ADMIN. Some screens, such as the user dialog and the role filter, show friendlier labels, such as Company Admin.

Role	Typically used for
Company Admin (COMPANY_ADMIN)	Owners and administrators who manage the company's setup, users and roles.
Company Dispatcher (COMPANY_DISPATCHER)	Dispatchers who plan routes and follow orders through the day.
Company Sales (COMPANY_SALES)	Sales staff who work with customers and quotes.
Company Billing (COMPANY_BILLING)	Billing staff who handle invoices and payments.
Accounting (ACCOUNTING)	Accounting staff.
Customer Portal (CUSTOMER_PORTAL)	Your customers' Customer Portal sign-ins. RushHour assigns it when you give a customer access to the Customer Portal — don't assign it to your staff.

The "typically used for" column is only a guide: what a role can actually do is whatever permissions it has in your company.

What a new company starts with

• Company Admin starts with every permission.
• Company Dispatcher, Company Sales, Company Billing and Accounting start with no permissions. Before you give one of these roles to your staff, open it on the Roles page and choose its permissions.
• Customer Portal receives a default set of self-service permissions the first time you invite one of your customers to the Customer Portal. The set covers things like the customer's own quotes, orders, invoices and payments.

Actions reserved for Company Admins

Some actions need the Company Admin role itself, whatever permissions a user's other roles have:

• Opening the Roles page and changing what roles allow.
• Choosing the roles of a user.
• Deleting users.
• Resetting or setting another user's password.
• Setting up most integrations in Settings → Integrations. See Integrations.

Change what a role can do

You need the Company Admin role.

1. Go to Settings → Users.
2. Select the gear (Settings) button next to Add User, then choose Roles. The item may show a Coming soon tooltip when you point at it, but selecting it opens the Roles page.
3. Select the role you want to change. Its card opens and shows the Permissions to: list, in alphabetical order.
4. Check the permissions the role should have, and clear the ones it shouldn't. Select All checks or clears every permission at once.
5. Select Save. To discard your changes, select Cancel.

The Roles page shows 10 roles at a time. Select Load More at the bottom to see the rest.

When changes take effect

• Changing a role's permissions applies straight away. People who are signed in may need to refresh the page before the menu and buttons they see match their new access.
• Changing which roles a user has takes effect when that user signs out and signs back in.

Permission areas

On the Roles page, permissions are listed alphabetically by name. Their names show which part of RushHour they belong to:

Area	Examples of what the permissions cover
Quotes	Viewing your own quotes or those created by other users, creating, editing, deleting, emailing and approving quotes.
Orders	Viewing your own orders or those of other accounts, creating, editing and deleting orders, BOLs and order sheets, holds, and creating invoices from orders.
Dispatch	Viewing assigned and unassigned orders, assigning and unassigning orders, creating and editing routes, stop priority, route history and archiving.
Customers	Viewing and editing your own customers or those of other accounts, creating and deleting customers, and export and import.
Accounting	Viewing invoices and payments, adding and editing payments, emailing invoices and payments, sending to QuickBooks and downloading data.
Drivers	Creating, editing, deleting, enabling and disabling drivers.
Outsource	Viewing, adding, editing and deleting outside carriers.
Documents	Viewing, uploading and managing documents, and importing with AI.
Inbox	Viewing the company Inbox and sending email.
Dashboard	Managing dashboards.
Customer Portal	What your customers can do in the Customer Portal, such as using the AI assistant and inviting colleagues to their own Customer Portal account.
Settings	Permissions whose names start with a Settings page, such as Profile tab, Users tab, Fleet tab, Locations tab, Expenses tab, Drivers settings, Billing, Charge types, Shipment types, Zones, Driver app, Activity log and AI usage, plus Terms & Conditions and the integrations permission, which is spelled Intergrations on the Roles page.

Coming soon

A Manage tracking links permission is being prepared in the Orders area. It will control who may create, copy, email and revoke the public tracking link of an order or a route. See Tracking links.

Some permissions come in pairs such as "from own account" and "from other accounts". The first covers records the user created; the second covers records created by other users. To work with all of them, a role needs both.

Give someone access step by step

1. Decide which role fits the person's job.
2. On the Roles page, check that the role has the permissions they need, and no more.
3. On the Users page, add the person or edit their account, and give them the role.
4. Ask them to sign out and back in if they were already signed in.