People, access and accountability

Team & Logins

Give every person their own sign-in so sales, cash-ups and payroll follow the person who did the work. Imported staff remain disabled until you activate them. Suspending a login keeps its history intact.

—People with login access

—Owner, managers and supervisors

—Till, floor, stock and receiving staff

—Suspended or awaiting activation

Who can sign in

Change access without deleting the person or their business history.

Loading team…

Add a login

Create an individual account—never share the owner password.

Full name

Username

Email (optional)

Phone (optional)

Supermarket role template

Temporary password (8+)

Department

Branch access

Staff profile language

This follows the person’s login on any till or staff device. It does not change the owner’s store language.

Till lane for a Customer Display login

Used only by the Customer Display role. The account remains locked to its assigned branch and lane and receives no staff permissions.

Assigned branch(es)

Hold Ctrl/Cmd to select more than one. “All branches” is available only to the owner.

Managers may add ordinary store operations roles inside their scope. Only the owner may grant management, finance, payroll, procurement, loss-prevention or audit authority.

What each role can do

Permissions fail closed when a role is unknown.

Owner

All branches and all permissions. The owner account cannot be disabled or reassigned.

Manager

Runs store operations, staff, stock, purchasing and cash office—but not owner setup, payroll, VAT filing, supplier payment or backups.

Supervisor

Front-end dashboard, tills, cash-up, refunds and discounts without owner financial or payroll access.

Cashier

POS, own shift and read-only item lookup. Refunds and management screens require a supervisor.

Operations

Receiving, stock control and buying are separate templates so one person need not control every step.

Office

Bookkeeper, payroll, loss-prevention and auditor templates expose only their own sensitive workspaces.

Display

Signs a tablet or separate screen into the read-only customer basket for one assigned branch and till lane. It cannot sell, refund, inspect stock or open staff pages. Pair it in Connected Mode for live cross-device updates.

Recent access changes

Created logins, role changes, password resets and suspensions recorded on this device.

Latest 12

No access changes recorded yet.

Passwords are not stored as textEvery real password is salted and hashed with PBKDF2-SHA256 on this device.

Suspension preserves accountabilityThe person can no longer sign in, while past sales, shifts and audit records remain attributed.

This is an on-device security boundaryUse separate Windows/device accounts or kiosk controls where staff must not have browser or operating-system administration access.