Security
Access control that matches how a dealership is actually run
Team and access settings live alongside company, locations, and billing configuration.
What it does
Three layers, applied everywhere
The first layer is the role. A CSR, a dispatcher, a service tech, a driver, a sales rep, a general manager, and an owner do not need the same screens, and in Purio they do not get them. Roles map to the jobs a dealership actually staffs rather than to abstract permission tiers.
The second layer is location. A location is a branch of your dealership, and scoping runs through everything: inventory counts, route days, reporting, and the customers a person can work. A manager at one branch reads their branch. An owner reads the business. This is the same location structure used by purchasing and reporting, not a separate access list that drifts out of sync.
The third layer is the individual permission for actions that carry weight on their own. Editing commission plans is the clearest example. It is its own permission, it is off by default, and it stays off for people who can otherwise work every lead on the pipeline board. A general manager grants it deliberately to the roles that should have it.
How access is controlled
Role based access
Roles that match the jobs a dealership staffs, not abstract tiers.
Location scoping
Branch scope applied to inventory, routes, reporting, and customers.
Separate sensitive permissions
Actions like editing comp plans are granted deliberately and off by default.
Per customer portal access
Your staff decide who gets a login, one customer at a time.
Customer set passwords
Portal users set their own credentials from the invite email.
Request review
Portal service requests are reviewed before they become scheduled work.
Permission aware Rio
The assistant answers only within the asker's access and scope.
Attributable records
Completions, payments, and adjustments carry the user and timestamp.
Security questions dealers ask
Walk through the permission model with us.
We will show how roles, locations, and individual permissions map onto your team.