Staff, roles & PINs
Invite staff, choose roles, limit access per outlet, set PINs for device sign-in, and customize each role's permissions.
On this page
Everyone who works at your outlet should have their own account. That way, every transaction, void, and discount is recorded under the right name, and you can revoke access at any time without changing a shared password.
Everything is managed in Back OfficeStaff & roles.
Two ways to sign in#
| Type | Signs in with | Default roles |
|---|---|---|
| Back Office + devices | Email & password in the Back Office, PIN on devices | Owner, Manager, Supervisor |
| Devices only (PIN) | Pick their name on the tablet, then a 4–6 digit PIN | Cashier, Waiter, Kitchen |
PINs are verified on the device, so staff can still sign in while offline.
Adding staff#
- Tap “Invite staff”. It’s in Back OfficeStaff & rolesStaff.
- Enter the full name and choose a role.
- For Back Office roles, enter an email. An invite link is sent to that address so the person can create a password and PIN.
- For device roles, you have two options: enter a Device PIN directly (the staff member is active right away, with no invite, using the Add & activate button), or enter an email or phone number to send an invite link by email or WhatsApp.
- Set outlet access. Choose All outlets (including outlets you open later) or Specific outlets.
Roles and permissions#
Back OfficeStaff & rolesRoles & permissions has a permission matrix for each role. Each permission is set to Allowed, Not allowed, or Needs PIN approval (device actions only).
Default permissions at a glance:
| Permission | Owner | Manager | Supervisor | Cashier | Waiter | Kitchen |
|---|---|---|---|---|---|---|
| Manage settings | Allowed | Allowed | Not allowed | Not allowed | Not allowed | Not allowed |
| Manage menu & pricing | Allowed | Allowed | Not allowed | Not allowed | Not allowed | Not allowed |
| Mark sold out | Allowed | Allowed | Allowed | Allowed | Allowed | Allowed |
| Manage staff & devices | Allowed | Allowed | Not allowed | Not allowed | Not allowed | Not allowed |
| Create orders & accept payments | Allowed | Allowed | Allowed | Allowed | Allowed | Not allowed |
| Manual discount | Allowed | Allowed | Allowed | PIN | PIN | Not allowed |
| Void after sent to kitchen | Allowed | Allowed | Allowed | PIN | PIN | Not allowed |
| Refund | Allowed | Allowed | PIN | Not allowed | Not allowed | Not allowed |
| Open drawer without sale | Allowed | Allowed | Allowed | PIN | Not allowed | Not allowed |
| Open/close shift & day | Allowed | Allowed | Allowed | Allowed | Not allowed | Not allowed |
| View reports | All outlets | All outlets | Own outlet | Not allowed | Not allowed | Not allowed |
| Process kitchen tickets (KDS) | Allowed | Allowed | Allowed | Not allowed | Not allowed | Allowed |
Only the Owner can manage modules and the subscription. The Owner role always has full access, and there must be at least one active Owner.
Custom roles#
Need a “Senior barista” who can give discounts without a PIN? Tap Custom role, give it a name, choose an existing role under Copy permissions from (for example, Cashier), then adjust the permissions in the matrix. Turn off Back Office access if the role only signs in on devices.
Signing in on a device#
- On the Who is on duty? screen, the staff member picks their name.
- They enter their PIN.
- To change who’s using the device: staff menu → Switch staff. Stepping away for a moment: Lock screen.
On a staff member’s personal phone, only its owner can sign in. After the first PIN sign-in, the app offers Face ID / fingerprint. The PIN still works at any time.
Staff leaving or forgetting their PIN#
| Situation | What to do |
|---|---|
| Forgot PIN | A Manager or Owner opens the staff member → Reset PIN. The old PIN stops working immediately. |
| Staff member leaves | Open the staff member → Deactivate. They are signed out of the Back Office right away and can’t sign in on devices. Their transaction history is kept and the user quota is freed up. Their personal phone is automatically revoked and its data wiped. |
| Moving to another outlet | Change Outlet access. It takes effect on devices after the next sync. |
For other sign-in problems, see Forgot PIN or password.
Was this guide helpful?
Thanks! Glad it helped.
Thanks for the feedback. Want us to help you directly?
Ask on WhatsApp