Permissions are set per staff member, and only apply in Personal PIN mode — on a shared PIN the whole team has whatever the shared identity has. See Staff modes and PINs. An Administrator always has every permission — the checkboxes apply to non-admin staff.
Open Staffs, select a person, and choose Permissions.
What each one unlocks
| Permission | Lets them |
|---|---|
| Edit Menu | Change categories, products, choice groups and options |
| Change Menu Availability | Mark items in and out of stock without full menu editing |
| Manage Promotions | Create, edit and disable promotions |
| Add Discount | Apply cart-wise and item discounts |
| Void Orders | Void items and orders |
| Refund Orders | Issue refunds |
| Manage Other Staffs' Tables | Open and work on a table another server started |
| View Orders of All Staffs | See everyone's orders, not just their own |
| View Sales | Open the sales report |
| View Sales of All Staffs | See the whole store's figures rather than their own |
| Edit Kiosk Settings | Change kiosk configuration and branding |
| Advanced Settings | Reach data management, WEB-SRM and system settings |
| Edit Staff | Add and edit staff members |
| Manage Punch In and Out | Edit and delete punch records |
Change Menu Availability is the one worth knowing about: it lets a shift lead 86 an item without being able to change prices or delete products.
What happens without a permission
One of two things. Either the entry point is hidden or greyed out entirely, or the button shows a small lock icon and asks for the Master PIN when tapped. The Master PIN is a one-shot authorisation — an Administrator types their own PIN to let that single action through without changing the person's permissions.
Presets
Rather than ticking boxes per person, build a preset once and apply it.
- Manage Presets… — create and edit presets
- Apply Preset — apply one to the staff member you're editing
- Select All — grant everything, for a manager
The staff list shows how many permissions each person has, so you can see at a glance who's over-privileged.
Editing a preset rewrites everyone it's applied to. The change lands on every staff member using that preset — including any boxes you ticked or unticked by hand for one person after applying it. Re-check individuals after editing a preset.
Deleting a preset takes nothing away. Staff keep the permissions it granted; only the link to the preset is removed. To revoke something, edit the person or apply a different preset first.
When changes take effect
A permission change made on one POS reaches your other devices when they next update. A POS that is offline keeps applying the permissions it last knew until it reconnects — so after removing a sensitive permission, check the change has landed on every device.
Two that deserve thought
- Advanced Settings reaches data deletion and export, and WEB-SRM. Keep it to owners and managers.
- View Sales of All Staffs exposes the whole store's takings. Servers usually need View Sales only.