Core platform

Roles, tenants & audit

Permissions are individual rights, not buckets: manage vehicles, approve bookings, correct receipts, issue devices. Roles bundle those rights — shipped or entirely your own.

Request a demo View pricing In every installation
Permissions 60+ individual rights
Tenants One database per tenant
Audit log Immutable
Sign-in Local or OIDC/SSO

Who may do what — and who changed what, when?

MobilityManager is multi-tenant from the ground up: each tenant has its own database, and the same user can hold different roles in different tenants. Every data-changing operation lands in an audit log that cannot be altered afterwards — modification attempts are rejected rather than silently applied.

What it does

What the module actually does

Rights, not role buckets

Permissions such as 'vehicles:manage' or 'belege:mark-paid' are granted individually. Each module brings its own rights.

System roles and custom roles

Shipped roles (system admin, tenant admin, fleet manager, approver, driver) work out of the box; custom roles can be composed freely.

Isolated tenants

Subsidiaries, agencies or sites run in separate databases from one installation. A tenant switcher in the header moves between permission sets.

Immutable audit log

Every data change produces an entry with user, timestamp and object — searchable and write-protected.

GDPR tooling

Access and erasure under Art. 15 and 17 are modelled as workflows; erasure is pseudonymization so operational history and retention duties survive.

Sign-in through your directory

OIDC against Azure AD / Entra ID, Keycloak or ADFS, so accounts are managed where they are managed anyway.

Frequently asked questions

Yes. Alongside the shipped system roles you can create any number of custom roles with exactly the rights a position needs — for example a role that reviews receipts but cannot change vehicles.

No. Separation happens at the database level, not just as a filter in a query. A user with access to several tenants switches deliberately and then works exclusively in that tenant's context.

Through pseudonymization: personal references are removed while operational records such as bookings or costs survive as anonymized entries. Retention periods are configurable and a background service cleans up expired data automatically.

See this module with your own data

30 minutes, no sales pressure: we show the module in the context of your fleet — self-hosted in your data centre, GDPR-compliant, made in Germany.