Settings & administration

Staff accounts & permissions

Give each staff member their own access to the stores and actions they need.

WHERE TO FIND IT

Administration → Users / Roles

Step by step

An authorised manager opens Users and chooses Add user.
Enter the staff member's details and use the available password or invitation flow.
Assign the appropriate store and role, then review permissions before saving.
Review access when duties change; deactivate accounts when staff leave.

Create or edit a role and select the required abilities: sales, refunds, discounts, stock changes, purchases, reports and settings. Give cashiers the actions they need; keep owner-level administration restricted.
Assign the role to a user and choose their accessible stores. Permissions control actions; store access controls which branch’s records they can see. Verify both with a test login.
When a staff member leaves or a device is lost, deactivate the account or revoke its active sessions. Built-in safeguards protect essential administrator access; read the validation message before changing privileged accounts.
When changing your sign-in email, complete the new-address verification flow and retain access to the old address until the change finishes. Do not create a second account just to change an email.

Start with Admin, Manager, Cashier, Stock Keeper or Accountant, or copy a role and adjust permissions. Built-in roles cannot be deleted; editing a shared role changes access for everyone assigned to it.
You can grant only permissions you hold. The system blocks removing or demoting the last active super administrator and blocks deactivating or deleting your own account.
Deactivating another user ends their existing sessions on the next request. Prefer deactivation when staff leave so historical actions still identify the person.
Store assignments restrict lists, reports, exports and scheduled report emails. Administrators can see all stores. Review the role at each assigned store rather than assuming one branch assignment grants every branch.

From your profile, review signed-in devices and choose Sign out other devices to keep only the current session. An authorised administrator can use Users → Sign out everywhere for another account.
Changing a profile email sends a single-use confirmation link to the new mailbox. Keep signing in with the old email until the valid link is confirmed.
The pending address cannot log in yet. An expired link or an address already owned by another account is rejected; accounts are not merged.

Controlled discount access: Decide which staff may discount or exceed permitted limits.
Individual staff accounts: Keep each staff member's work linked to their own login.
Built-in & custom roles: Use existing roles or build a permission set for your team.
Granular permissions: Control discounts, refunds, voids, reports, costs and settings separately.
Store-level access: Limit records, reports and exports to assigned stores.
Immediate deactivation: End access when a staff account is switched off.
Remote session sign-out: Revoke signed-in sessions when a device needs to be disconnected.
Verified email changes: Confirm a new sign-in email before replacing the existing one.
Administrator safeguards: Protect the last administrator and prevent unauthorised permission grants.