# Multi-Tenant IoT Platform with Custom Roles & Permissions | Widgelix URL: https://greenmesh.org/platform/multi-tenant-roles > Run many customer organisations from one login: org switcher, search across all your organisations, custom roles with Read/Write/Delete per module, access limited to specific assets, dashboards or actions, and asset transfer between organisations. --- [Platform](https://greenmesh.org/platform) / Multi-Tenant & Roles Platform · Organisations & Roles # A multi-tenant IoT platform with roles down to a single asset Give every customer, site or department its own organisation with separate data, users and dashboards, and manage all of them from one login. Custom roles decide who sees which menus, what they can change and which items they can access. One login for all your organisations Custom roles Read / Write / Delete per module Per item access limited to specific assets or dashboards ![Widgelix Settings, Roles & Permissions tab with system roles Admin, Contributor, Viewer and custom roles Site Manager and Field Technician](https://greenmesh.org/images/platform/roles-list.jpg) The problem ## Integrators serve many customers, but most IoT tools think in one account System integrators and operators run deployments for dozens of customers. Separate logins per customer are hard to manage, and a single shared account exposes everyone's data to everyone. Field technicians and customers need narrow access, not admin rights. - A separate login for every customer project - Customers see each other's devices in shared accounts - Only “admin” or “viewer”, nothing in between - Contractors need access to one site, not the whole fleet How it works ## Organisations, users and roles - 01 ### One organisation per customer Create an organisation for each customer, site or department. Data, assets, dashboards and actions stay inside it. - 02 ### Invite users with a role Add users by email and give each one a role per organisation. One person can have different roles in different organisations. - 03 ### Switch and search across organisations Jump between organisations with the switcher, pin the ones you use most, and search assets across all your organisations at once. Capabilities ## Built for integrators and operators Every API call is checked against the user's membership, role and item restrictions in that organisation. ### Organisation switcher Search organisations by name or ID, pin favourites, see recent ones, and open an overview of all organisations sorted by name, assets, alerts or creation date, with asset, offline and critical counts on each card. ### Search across organisations Global search can look in all your organisations at once, and results respect the permissions you have in each. ### System roles Admin (full access), Contributor (works with all modules, optional delete rights) and Viewer (read-only). ### Custom roles Choose which sections appear in the menu and grant Read, Write or Delete per module: assets, asset templates, actions, solutions, site dashboards, reports, events, LoRaWAN, project repository and overview. ### Access to specific items Limit a role to selected assets, asset templates, actions, solutions, site dashboards, reports, projects or LoRaWAN gateways, devices and profiles. Perfect for a contractor responsible for one site. ### Safe delegation Users can't grant roles more rights than they hold themselves, and roles still assigned to users can't be deleted by accident. ### Move assets between organisations Transfer an asset to another organisation by its ID (its template is copied along), or copy an asset template to another organisation you manage. ### Organisation overview Fleet status, asset quota, SMS balance, LoRaWAN gateways, alerts in the last 24 hours and the user list on one page, with your organisation logo. ## Permissions per module, in one matrix Custom roles combine menu access with Read, Write and Delete rights per module. Write and Delete always require Read, so roles stay consistent. ![Widgelix custom role editor with the Menu & modules matrix of Read, Write and Delete permissions](https://greenmesh.org/images/platform/role-modules.jpg) At a glance ## Organisation and access features | Organisations per user | Many organisations per login, one role in each | Switching | Org switcher with search, pinned and recent; all-organisations overview | Cross-org search | “Search in all my organizations”, permission-aware | System roles | Admin, Contributor (optional delete), Viewer | Custom roles | Menu access + Read/Write/Delete per module, user and role management rights | Item restrictions | Assets, templates, actions, solutions, site dashboards, reports, projects, LoRaWAN items | Transfers | Asset transfer between organisations; copy asset template to another organisation | Branding | Organisation logo; white-label for partners with your domain, colours, language and email sender | Sign-in | Email and password ## Who uses multi-tenancy [Partner programme Resell Widgelix to your customers, under your brand if you want.](https://greenmesh.org/partners) [IoT for retail Store teams see their store, head office sees all.](https://greenmesh.org/solutions/retail) [Project templates Roll out the same solution to a new customer organisation.](https://greenmesh.org/platform/project-templates) [Reports & data export Send each customer reports with their own data.](https://greenmesh.org/platform/reports-data-export) ## Questions about organisations and roles #### Can I manage many customers from one account? Yes. One login can belong to many organisations. Switch between them with the organisation switcher and search across all of them at once. #### Can a user have different rights in different organisations? Yes. Roles are assigned per organisation, so someone can be Admin in one and Viewer in another. #### Can I give a contractor access to only one site? Yes. Create a custom role and restrict it to the assets, dashboards or actions of that site. The contractor sees nothing else. #### Can I move a device to a customer's organisation? Yes. Transfer the asset using the target organisation's ID; its asset template is copied along. Collected history stays behind, so transfer before going live. #### Is white-label available? Yes, for partners. Our team sets up white-label for your domain, with your product name, colours, interface language and email sender. Every organisation can also upload its own logo. #### Do you support SSO? Sign-in is with email and password today. [Read the roles and permissions guide → System roles, custom roles, module permissions and entity restrictions in detail.](https://docs.widgelix.com/roles-and-permissions/user-guide) ## More platform features [Project Templates Package a working solution once and install it into another organisation in minutes.](https://greenmesh.org/platform/project-templates) [Reports & Data Export Scheduled CSV reports by email, PDF reports from widgets and one-click CSV exports.](https://greenmesh.org/platform/reports-data-export) [IoT Dashboards No-code dashboards for every device, site and role, with 20+ widget types.](https://greenmesh.org/platform/iot-dashboards) [IoT Alerts & Automation Actions that react to sustained real-world conditions, not noisy single readings.](https://greenmesh.org/platform/iot-alerts-automation) [Integrations The Things Stack, ChirpStack, Actility, LORIOT, Helium, Sigfox, MQTT, webhooks and more.](https://greenmesh.org/platform/integrations) ## Run every customer from one platform Tell us how many customers, sites and user groups you serve. We'll show you an organisation and role setup that fits. - Organisation structure for your customers - Custom roles for staff, customers and contractors - Partner and white-label options