Users and permissions

Open Users to manage who can sign in. Every user gets their own account, and every sale, void and shift is recorded against whoever was signed in at the time.

Adding a user

Each account has:

• Username — what they type to sign in.
• Display name — what appears on receipts and in reports.
• PIN or password — a short PIN for cashiers on a touch screen, a longer password for administrators.
• Active — untick to block sign-in without deleting the account.
• Permissions — which screens they may open.
• Max discount % — the highest manual till discount they may apply. The till checks this when they press apply on Discount or Change Total — it does not silently reduce the figure, and it does not wait until Pay. 0 blocks those keys. 100 (the default) allows any discount. Promotions still apply on their own and are not limited by this.

Permissions

You tick, per user, which of these ten permissions they can reach: pos, dashboard, products, stock, customers, documents, reports, promotions, users and settings. Stock also opens Purchases and Stock → Activity.

A screen that is not ticked simply is not available to that user. This is the main control you have, so it is worth thinking about rather than ticking everything.

Sensible starting points

Cashier — pos only. Possibly customers, if they are expected to sign people up. Give them a low Max discount % (often 0 or 5) so a supervisor has to apply a larger courtesy discount.

They can sell, and that is the job. Not giving them Products means a price cannot be quietly edited mid-shift. Not giving them Documents means a sale cannot be voided after the fact without a supervisor.

Supervisor — pos, documents, customers, stock, reports.

Enough to run the floor, handle a refund and count a shelf, without being able to change what things cost or who can sign in.

Manager — everything except users and settings.

Owner or administrator — everything, including the Admin right.

The Admin right (the settings tick, or the built-in admin account) is the only way to change shop setup: settings, users, the licence, tax rates, payment types, company details, and backup. A cashier can still change their language, the till zoom, and the POS shortcuts. The admin username cannot be renamed, deactivated, or lose Admin.

Users without Admin do not see Settings, Users, Licence, or the crash log, and the till menu does not show the settings gear.

Why per-person accounts matter

It is tempting on a busy counter to have one shared login. Resist it. The moment there is one login, the audit log records “the till did it” and every management screen becomes decoration. You cannot tell who voided the sale, whose drawer was short, or who is your best seller.

The cost of doing it properly is about two seconds per handover: Sign out from the management home tiles (or the POS More menu) so the next person signs in as themselves. Use Lock only when the same cashier is coming straight back.

When someone leaves

Untick Active. Do not delete them.

A deactivated user cannot sign in, but their name stays attached to every sale they ever rang up, which is what you need if a question comes up about a transaction from three months ago. Deleting the account to tidy the list costs you that history.

Changing a PIN

Edit the user and set a new PIN. Do this immediately if one has been seen or shared, and as a matter of routine when someone leaves and their PIN was known to others.

Reviewing it occasionally

Twice a year, open Users and read the list. Look for accounts belonging to people who no longer work there, accounts with more permissions than the job needs, and the number of people who can reach Settings. It takes five minutes and it is the cheapest control in the app.