Roles decide what people reach
Give each person the narrowest role that lets them do their job. A cashier does not need the accounting screens; a manager does.
Roles also decide what someone can do at the till — for example how much discount they may apply without approval.
PINs, not passwords, at the till
Staff sign in to the till with a PIN rather than a password, because a cashier types it dozens of times a day and a full password is the wrong instrument for that.
Give each person their own. This is the single setting that matters most:
- A shared PIN makes the by-employee report meaningless — it cannot attribute what the system was never told.
- A drawer shortfall at the end of a shift has no owner.
- A discount given away cannot be traced to who gave it.
Shop scoping
Staff are scoped to the shops they work in. A cashier at one branch cannot sell from another branch's stock or see its takings, and that restriction is applied on the server rather than by hiding a menu.
An owner or manager role with access to all shops can see across them.
Changing someone's role
You can change a role later without losing anything they have posted. Their history stays attributed to them.
When someone leaves
Mark them inactive rather than deleting them, so the sales they made still have a name against them.
See the POS Cloud manual for the full setup order.