Staff need the app to do their job and no more of it. Roles are yours to define, screen by screen, rather than chosen from a fixed list.
One owner login shared with the staff is how most small businesses start, and it has two costs: everyone can see the margin on every item, and nothing that goes wrong can be traced to a person.
Roles fix both. A cashier bills and takes payments; a storekeeper touches stock; an accountant reads reports. Each person signs in as themselves, sees the screens their role allows, and the audit log records what was done under their name.
Name it for the job — cashier, storekeeper, accountant.
Allow what the job needs and leave the rest closed.
Their own login, with that role attached.
Roles can be tightened as the business changes.
Who can open the books, on which device, and what they are allowed to do once inside. Staff get accounts of their own rather than a shared password, and what each of them can reach is set screen by screen.
Most of it is set up once, early, and then only noticed when something changes — a new device signs in, a bill is cancelled, a role needs tightening.
The logins it applies to, and what records their actions.
Yes — permissions are set screen by screen, so a cashier can bill without the profit screens being open to them.
That is the point of it: their own login is what makes the audit log meaningful and the permissions enforceable.
Yes, roles can be edited as responsibilities change.
Everyone signs in as themselves and sees exactly the screens their job needs.
