Users and roles

Users#

Users (system.users.view; create / update / delete keys to change them). Each user has a name, username, email, phone, role and optionally an outlet. A user pinned to an outlet sees and sells only that outlet's stock, invoices and payment methods. Without an outlet, invoices, payments and money records are limited to the ones that user created — unless their role holds * (full access), which sees every outlet.

Set Status to Inactive to stop someone signing in without deleting their history.

• You can only manage users whose role is within your own permissions.
• The owner account is protected: it cannot be deleted or demoted.

Roles#

Permissions → Roles (system.roles.manage). A role is a set of permission keys grouped by area. Built-in system roles cannot be deleted; create your own for each job (cashier, manager, accountant…).

You can grant a role only keys you hold yourself. Permissions lists every key with its description; Groups shows how they are grouped.

See Roles & permissions for the principles.