Module 35 · Advanced · 8 min read

Users, permissions and security

You will be able to: Add a user with the right role; Explain the price, cost, customers and insurance rights; Handle leavers and shared logins safely.

  • Read not done yet
  • Self-check: not taken not done yet
  • Lesson complete not done yet

Security in a garage is not about hackers first. It is about the right person seeing the right thing. A mechanic has no need to see the price of the owner's job, a guard has no need to see a customer's mobile, and a cashier should not change the company's settings. Zeyto Garage Pro enforces this on the server, so hiding a menu is not the only protection.

Roles and rights

Each user has a role, and each role holds rights. The rights that matter most to a manager are: the price right, which shows amounts; the cost right on top of it, which shows supplier costs; the customers right, which shows contact details and TRN; and the insurance right, which shows claim details. Users and permissions are managed in Settings.

  1. Create the user with his own name and a personal login.
  2. Choose the role that matches his job, not the role that avoids complaints.
  3. Check what he sees by signing in as him, or by checking the role's rights.
  4. When he leaves, switch his user off the same day.

Why personal logins matter

Every posting and override is recorded with the user who did it. If three people share one login, the record says nothing. A shared login is also the one that stays in use after somebody leaves. Release overrides, approvals and day close are only meaningful when each person has his own.

The foreman who wanted moreThe foreman asks for Admin because he cannot see the customer's mobile number to call about a delay. Giving Admin would open the accounts and settings to him. Instead the owner lets the Service Advisor make the call, and gives the foreman the Workshop Manager role, which already lets him manage the workshop, issue parts and put jobs on hold.
Watch outDo not give Admin as a favour. An Admin can change settings, release unpaid cars and see every price and cost.
TipReview the user list every quarter. Switch off anyone who has left, and look at who holds Admin.

Everyday habits

  • Choose passwords that are not a name or a plate number, and never write them on the wall of the workshop.
  • Sign out on shared counter computers at the end of a shift.
  • Keep Admin for the owner and one trusted manager.
  • Use the override rights, such as releasing an unpaid car, only with a reason, and read the reasons from time to time.

None of this needs technical skill. It needs the manager to treat access as part of the job, as he does the workshop keys.

Try it in the demo

  1. Open the Garage demo at https://garage.zeyto.app and, if your sign-in allows it, open Settings, then Users.
  2. Read the roles and note which hold the price and customers rights.
  3. Compare what the Technician and the Service Advisor roles can open.
Open the live demo

Public demo company, sign in as admin / demoAdmin123. Data refreshes nightly.

Key takeaways
  • Access is enforced on the server by role and right.
  • The price, cost, customers and insurance rights control what is visible.
  • Personal logins make records meaningful; switch off leavers the same day.
  • Avoid giving Admin to solve a small need.

Check yourself

4 questions on this lesson. Not timed, not the exam, and you can try again. Score 60% or more, and read the lesson, to complete it.

1. Why should every person have a personal login?

2. Which are good security habits for a garage manager?

Select all that apply.

3. Which right is needed, on top of the price right, to see supplier costs?

4. The foreman asks for Admin only to see a customer's mobile number. What is the best answer?

Previous: Dashboards, scorecard and the daily digestNext: Backups and data safety

Practice questions for this module · Printable study sheet