Who can do what with cash

Cash access is a different axis from dashboard access. Someone can run your whole menu and never touch a drawer, and someone can run a till and see almost nothing else. This page is the matrix.

What each role is for

These are the product’s own descriptions of the seven roles:

Role	Description
Restaurant owner	Restaurant account owner with full access. Approves and audits cash but never opens a till.
Manager	Runs the floor: staff, menu, pricing, devices, and full till supervision including force-closing an abandoned shift.
Cashier	Counter till operator. Opens and closes a cash drawer, takes payments, manages reservations, records safe drops, and runs day close.
Waiter	Takes orders and payments at the table and may carry a personal cash float. No counter drawer and no day close.
Kitchen	Kitchen display access to incoming orders, printers, and stock counts. No cash access.
Accountant	Read-only access to orders, customers, stock, and till reports. Never a till operator.
Support staff	Front-of-house support for reservations, customers, and notifications. No cash access.

The floor-staff role is called Waiter throughout the dashboard.

The cash matrix

	Owner	Manager	Cashier	Waiter	Accountant	Kitchen	Support
See register sessions	●	●	●	●	●	—	—
Open a drawer shift	—	●	●	—	—	—	—
Open a personal float	—	●	●	●	—	—	—
Close own shift	●	●	●	●	—	—	—
Close anyone’s shift	●	●	—	—	—	—	—
Record cash movements	●	●	●	—	—	—	—
Close the business day	●	●	●	—	—	—	—
Reopen a closed day	●	●	—	—	—	—	—
Take a payment	●	●	●	●	—	—	—
Refund a payment	●	●	●	—	—	—	—
Void a payment	●	●	—	—	—	—	—
Apply a discount	●	●	●	—	—	—	—
Read reports	●	●	●	—	●	—	—
Read financial reports	●	●	—	—	●	—	—
Read labour reports	●	●	—	—	●	—	—

The owner holds everything by default — with two deliberate exceptions, marked in bold.

The owner cannot open a till

Both till-opening permissions are explicitly taken away from the owner role. This is not a bug and it is not configurable: a cash shift exists to name a real person at a real device, and an owner account that half the staff can reach is not that person. The owner approves cash, audits it, force-closes an abandoned shift and closes the day — but somebody who is actually standing at the till opens it.

If the owner also works the counter, give them a second staff login with the cashier role and use it at the till.

Refund and void are not the same permission

• Refund gives money back against a payment. Cashiers have it, because a customer at the counter wanting their money back is an ordinary counter event.
• Void cancels a payment as though it had not happened. Managers and the owner have it, cashiers do not, because voiding is how a payment disappears from the record.

Removing an item from a bill is a third thing again, with its own two-person approval — see the order voids report.

Roles you cannot delete

Owner, manager, cashier, waiter and kitchen are protected and cannot be deleted or renamed away. The reason is structural: register sessions, device purposes and the POS till gates are all expressed against these role names, so removing one would strand cash accountability.

Accountant and support staff are fully editable, and you can build your own roles alongside them — see Custom roles.