Job titles & permissions — help

Every till action that matters — voiding sent items, discounts, refunds, cash-outs, taking over a table — is governed by a permission. Who can do what is set by job titles: each title decides, per action, one of three behaviours:

Allowed — the person just does it.
Manager PIN — the till asks for a manager's PIN before proceeding.
Not permitted — the action is blocked (and its button hidden where that makes sense, like the home screen's order-type buttons).

Only the organisation owner can edit job titles and permissions.

Getting started

Open Team → Permissions and press Add recommended titles. You get six starting points — Team Member, Supervisor, Manager, General Manager, Finance and Administrator — each with sensible defaults (a Supervisor, for instance, can apply discounts up to 15% and refunds up to £25 without a PIN). Rename, adjust or delete them freely; they're yours after seeding.

Until you assign titles, nothing changes: staff keep today's behaviour — managers approve, everyone else is asked for a manager PIN on sensitive actions.

Limits

Two permissions carry an optional cap: order discounts (a percentage) and refunds (an amount). Within the cap the action is allowed; beyond it the till escalates to a manager PIN rather than blocking. Leave a cap empty for no limit.

Each row shows a colour-coded chip with its resolved state at a glance, so the four cases stay distinct: Allowed, Allowed up to a limit (Allowed with a cap set), Manager approval required, and Not allowed.

Removing items the kitchen already has

Tapping − on an item that hasn't been sent removes it straight away. Once an item has been sent to the kitchen, − marks it VOID PENDING instead, so you can mark several before anything is cancelled. All the pending voids are then confirmed together with one reason and, if your title needs it, one manager PIN:

Table orders: they're confirmed when you press Save, Fire or Pay.
Counter sales and tabs: while anything is pending, the New order button becomes Confirm void. Press it, or press Pay.

Each confirmed item prints an ITEM CANCELLED ticket to its station. If every item on an unpaid order is voided, the order closes and disappears from the till, the same as when you remove unsent items. Cancelling the PIN or reason prompt restores the items. + restores one pending unit before it adds more.

Manager titles

A title marked Manager can approve "Manager PIN" actions with their own PIN — on their own actions and for colleagues. The stock Manager template deliberately cannot edit job titles & permissions; General Manager can.

Assigning staff

On Team → Staff, pick each person's job title from the dropdown. Role default keeps the legacy behaviour (managers approve, everyone else asks). Per-person Exceptions layer on top of the title — "like a Team Member, but allowed to cash out" — and are highlighted so unusual grants stay visible. Precedence is: exception, then title, then the standard default.

Changes reach the tills on their next staff sync; tills keep the last-synced permissions when offline.

Which stores someone works at

For multi-store organisations, each staff member has a Stores setting on the Team › Staff page — click the value in the Stores column to change it. No stores selected (the default) means they work at every store, including ones you add later. Pick specific stores to keep someone local: they'll appear on the till sign-in list only at those stores, and — for managers — their PIN approves refunds, voids and Z-report closes only at the stores they work at. Area managers should stay on "All stores".

Activity log

Team → Activity shows who did what, when: sensitive till actions (sent-item voids with their reason, discounts, pacing overrides — each naming the approving manager where a PIN was used) and Hub changes (job titles, staff profiles, changes applied through the AI assistant). Filter by kind, and load further back as needed. AI assistant rows have an Undo button while the change can still be reversed — see AI assistant. Owner-only.