Everyone signs in with their own PIN, so every action carries a name. Staff handles accounts and shifts; Roles & Permissions decides what each role may do.
Roles
| Role | Can |
|---|---|
| Cashier | Sell, take payments, print, see today's payments, clock in and out. |
| Manager | All of the above, plus caja, refunds, bank-transfer confirmation, corrections, inventory, receiving, purchase orders, reports, audit log, custom discounts. |
| Admin | All of the above, plus settings, staff accounts, roles and permissions, promotions. |
Staff screen
- Add Staff — name, temporary PIN, role and language. They set their own PIN on first sign-in.
- Clock In and Clock Out — a manager can clock someone in with their PIN and drawer float, and clock them out with a closing count and shift totals.
- Reset PIN when someone forgets theirs; Force PIN Change to make them pick a new one next time.
- Change language for any team member.
- Staff management is available on the full plan.
Roles & Permissions
- Edit Role to promote or demote someone. You cannot change your own role.
- Permission Matrix — a grid of actions by role. Switch an action on or off and it applies immediately. Editing the matrix is available on the full plan.
Approval without switching users
When a cashier needs something above their role — a refund, a manager report, a discount below cost — the app shows Manager Access Required and a manager types their PIN right there. The action is recorded under the manager's name.