User & Permission Management
Roles, permissions, and access control for all users
User & Permission Management
User & Permission Management provides granular access control with role-based permissions at shop, admin, and POS levels.
Viewing Users
Step 1: Click Settings > Users in the sidebar
Step 2: View all users for your restaurant
Step 3: Each row shows:
- User name
- Role
- Status
- Last login
Adding a New User
Step 1: Click Add User button
Step 2: Enter user details:
- Name
- Email address
- Phone (optional)
Step 3: Select role or custom permissions:
Step 4: Assign to shops (if multi-location)
Step 5: Click Save
Step 6: User receives invitation email
Step 7: User clicks link to set password
Editing User Permissions
Step 1: Find user in the list
Step 2: Click to open user details
Step 3: Modify permissions:
- Check boxes to grant access
- Uncheck to remove access
Step 4: Click Save
Changes take effect immediately.
User Roles
Predefined permission sets:
| Role | Access Level |
|---|---|
| Owner | Full access to everything |
| Manager | Operations, orders, reservations, reports |
| Staff | Limited to assigned features |
| Kitchen | Order view and status updates |
| Delivery | Delivery orders only |
Editing Roles
Step 1: Click Roles tab
Step 2: Select a role
Step 3: Modify default permissions
Step 4: Save changes
Permission Categories
Shop-Level Permissions
| Permission | Access Granted |
|---|---|
SHOP_ALL_ACCESS | Full shop access |
SHOP_ORDER_ACCESS | View and manage orders |
SHOP_MENU_ACCESS | Edit menu |
SHOP_SETTING_ACCESS | Change settings |
SHOP_RESERVATION_ACCESS | Manage reservations |
SHOP_REPORT_ACCESS | View reports |
SHOP_ANALYTICS_ACCESS | View analytics |
SHOP_MARKETING_ACCESS | Manage marketing |
SHOP_REVIEWS_ACCESS | Manage reviews |
SHOP_CUSTOMERS_ACCESS | View customers |
Admin-Level Permissions
| Permission | Access Granted |
|---|---|
ADMIN_DASHBOARD_ACCESS | Platform dashboard |
ADMIN_ORDERS_ACCESS | All orders |
ADMIN_RESERVATIONS_ACCESS | All reservations |
ADMIN_USERS_ACCESS | User management |
ADMIN_SHOP_CREATE_ACCESS | Create shops |
ADMIN_PLAN_ACCESS | Subscription plans |
ADMIN_SEGMENTS_ACCESS | Customer segments |
ADMIN_ANALYTICS_ACCESS | Platform analytics |
ADMIN_MARKETING_ACCESS | Platform marketing |
ADMIN_BILLING_ACCESS | Billing management |
ADMIN_SHOP_SETTING_ACCESS | Shop settings |
POS Access Levels
| Permission | Access Granted |
|---|---|
POS_TAKE_ORDER_ACCESS | Create orders |
POS_ORDER_ACCESS | View orders |
POS_RESERVATION_ACCESS | View reservations |
POS_TRANSACTION_ACCESS | Process payments |
POS_SETTING_ACCESS | POS settings |
Multi-Shop Access
Assign users to multiple locations:
Step 1: Edit user
Step 2: Find Shop Assignment section
Step 3: Check shops the user should access
Step 4: Set permissions per shop (if different)
Step 5: Save changes
User can now switch between assigned shops.
Removing a User
Step 1: Find user in list
Step 2: Click the delete icon
Step 3: Confirm deletion
Step 4: User immediately loses access
Resending Invitation
If a user didn't receive their invite:
Step 1: Find user in list
Step 2: Click Resend Invitation
Step 3: New email is sent
Step 4: Previous link is invalidated
Tracking User Activity
Monitor who did what:
Step 1: Click on a user
Step 2: View activity log:
- Last login time
- Recent actions
- IP addresses
Security Best Practices
Creating users:
- Use real email addresses
- Assign minimum necessary permissions
- Review access regularly
Managing access:
- Remove users who leave immediately
- Audit permissions quarterly
- Use roles instead of custom permissions
Password security:
- Users should use strong passwords
- Don't share login credentials
- Enable 2FA when available
Troubleshooting
User can't log in:
- Check if user is active
- Verify email is correct
- Resend invitation if needed
User missing features:
- Check assigned permissions
- Verify shop assignment
- Review role settings
Too much access:
- Review and remove unnecessary permissions
- Consider using a more restrictive role
- Audit all user access