Running it · 1 of 3 · 2 min read
Staff and permissions
Give people their own login, and decide who can do what.
Every person who uses the till should have their own login. Not because anyone is under suspicion, but because a sale with a name on it is a sale you can ask about.
Add a person
Give them a name, a login, and a PIN. The PIN is what they use at the till — short enough to type between customers, and their own.
Your account password is a different thing entirely. That is the owner's, used for billing and cloud access. Staff never need it and should never have it.
Roles and permissions
Decide what each person can do. The ones worth thinking about:
- Refunds — the simplest way to take money out of a till
- Price overrides and discounts — the simplest way for a mistake to become invisible
- Voids — removing a sale from the day's takings
- Cash in and out — moving money that is not a sale
- Reports and settings — who sees the numbers, and who can change how the shop works
A reasonable default: cashiers can sell, supervisors can refund and override, and only you can change settings.
Requiring a supervisor for a refund turns it into a conversation between two people. Most of what it prevents is not theft — it is a well-meaning error nobody noticed until the stock count.
The till lock
Between shifts the till locks itself. The business stays selected, so nobody hunts through a list at eight in the morning, but a PIN is needed to prove who is standing there.
Without it, a lane reopened the next day would silently resume the previous cashier — their session, their name on every sale, and their permission to override prices. The lock is what stops one person's authority being inherited by whoever opens up.
Leavers
Deactivate rather than delete. Their past sales keep their name, which is what you want if a question comes up in six months. A deleted person leaves a shop full of sales belonging to nobody.
Something here wrong or missing? Tell us — we would rather fix it than have you work around it.