Product-specific roles
Some roles are bound to specific products. This page lists all predefined product-specific roles and their permissions. Provider-scoped permissions such as personal discounts, personal discount types, and promo codes are documented on the provider-specific roles page.
Product Admin
This role includes the broadest predefined permission set for a product. The Product Admin can set up and manage the products that are assigned to them.
The Product Admin role contains all permissions to use ioki Booking. A Product Admin therefore does not require the Product Booking Agent role.
- create_users
- read_users
- update_users
- lock_users
- delete_users
- manage_eligibility_group_memberships
- update_product
- audit_rbac
- manage_rbac
- create_stations
- read_stations
- update_stations
- delete_stations
- read_areas
- create_areas
- update_areas
- delete_areas
- manage_zones
- manage_blacklisted_travel_combinations
- manage_lines
- create_places
- read_places
- update_places
- delete_places
- create_ratings
- update_ratings
- delete_ratings
- create_drivers
- read_drivers
- update_drivers
- lock_drivers
- delete_drivers
- generate_one_time_codes_for_drivers
- read_driver_emergencies
- acknowledge_driver_emergencies
- manage_driver_reports
- create_vehicles
- read_vehicles
- update_vehicles
- delete_vehicles
- create_vehicle_positions
- manage_pauses
- create_driver_vehicle_connections
- read_driver_vehicle_connections
- delete_driver_vehicle_connections
- create_task_lists
- read_task_lists
- update_task_lists
- delete_task_lists
- create_rides
- read_rides
- update_rides
- delete_rides
- cancel_rides
- create_bookings
- manage_tasks
- read_sms
- send_sms
- delete_sms
- read_service_credits
- create_service_credits
- delete_service_credits
- read_payment_methods
- read_service_violations
- read_phone_calls
- read_passenger_options
- read_passenger_types
- read_ride_options
- create_service_violation_acknowledgments
- read_broadcasts
- create_broadcasts
- send_push_notifications_to_drivers
- manage_announcements
- read_tickets
- cancel_tickets
- create_refunds
- handle_failed_payments
- create_venues
- read_venues
- update_venues
- delete_venues
- manage_vehicle_integrations
- read_matching_configurations
Product Operator
This role includes all permissions to operate the product on a daily basis. The Product Operator has all rights to manage the current traffic and vehicle plannings but not change the basic product settings.
- create_users
- read_users
- update_users
- lock_users
- delete_users
- read_stations
- update_stations
- create_places
- read_places
- create_ratings
- update_ratings
- delete_ratings
- manage_lines
- create_drivers
- read_drivers
- update_drivers
- lock_drivers
- delete_drivers
- generate_one_time_codes_for_drivers
- read_driver_emergencies
- acknowledge_driver_emergencies
- manage_driver_reports
- create_vehicles
- read_vehicles
- update_vehicles
- delete_vehicles
- create_vehicle_positions
- manage_pauses
- create_driver_vehicle_connections
- read_driver_vehicle_connections
- delete_driver_vehicle_connections
- create_task_lists
- read_task_lists
- update_task_lists
- delete_task_lists
- create_rides
- read_rides
- cancel_rides
- update_rides
- create_bookings
- manage_tasks
- read_sms
- delete_sms
- send_sms
- read_service_credits
- read_payment_methods
- read_service_violations
- read_phone_calls
- read_passenger_options
- read_passenger_types
- read_ride_options
- create_service_violation_acknowledgments
- send_push_notifications_to_drivers
- manage_announcements
- read_tickets
- cancel_tickets
- read_venues
- update_venues
- read_matching_configurations
Product Operator (Subcontractor)
Predefined role. This role is a variant of ‘Product Operator’ with a few less permissions. It is specifically designed to grant administrators of associated operator companies to manage daily operations within a product.
- read_users
- read_stations
- read_places
- create_drivers
- read_drivers
- update_drivers
- lock_drivers
- delete_drivers
- generate_one_time_codes_for_drivers
- read_driver_emergencies
- acknowledge_driver_emergencies
- manage_driver_reports
- create_vehicles
- read_vehicles
- update_vehicles
- delete_vehicles
- create_vehicle_positions
- manage_pauses
- create_driver_vehicle_connections
- read_driver_vehicle_connections
- delete_driver_vehicle_connections
- create_task_lists
- read_task_lists
- update_task_lists
- delete_task_lists
- create_rides
- read_rides
- cancel_rides
- update_rides
- create_bookings
- manage_tasks
- read_sms
- delete_sms
- send_sms
- read_service_violations
- read_phone_calls
- create_service_violation_acknowledgments
- send_push_notifications_to_drivers
- read_tickets
- read_venues
- read_matching_configurations
Product Booking Agent
Predefined role. This role includes permissions to book rides for passengers using ioki Booking. If operators should be able to create users within ioki Booking, the provider based role User Manager is required in addition to this product based role.
- cancel_rides
- create_bookings
- create_rides
- read_areas
- read_service_violations
- read_passenger_options
- read_passenger_types
- read_ride_options
- read_rides
- read_stations
Product Observer
This role is intended to observe the product and contains read permissions. A Product Observer can view most product data but cannot manage it.
- read_users
- read_stations
- read_places
- read_drivers
- read_driver_emergencies
- read_vehicles
- read_driver_vehicle_connections
- read_task_lists
- read_rides
- read_service_credits
- read_payment_methods
- read_service_violations
- read_phone_calls
- read_passenger_options
- read_passenger_types
- read_ride_options
- read_tickets
- read_venues