Managing POS Staff: Roles, Permissions, and Magic Link Login
Control who can do what in your POS. Learn how to set up staff roles, manage permissions, and use magic link logins for fast, secure access.
Key Takeaways
- AskBiz POS supports three roles — Owner, Manager, and Cashier — each with different permission levels.
- Magic link login lets staff sign in with a single tap, no passwords to remember or reset.
- Granular permissions protect sensitive operations like refunds, voids, and data exports.
Why staff roles matter in a POS
When you are the only person behind the till, permissions are irrelevant — you can do everything. The moment you hire a second person, everything changes. A Saturday shop assistant should be able to process sales and print receipts, but should they be able to issue refunds, void transactions, or export your revenue data? Almost certainly not. Staff roles let you define exactly what each person can and cannot do inside the POS. This protects your business from accidental errors (a trainee accidentally voiding a day's worth of sales) and deliberate misuse (an employee issuing fraudulent refunds). It also simplifies the interface for each user — a cashier sees only the screens they need, which speeds up training and reduces mistakes.
The three roles in AskBiz POS
Owner is the top-level role with unrestricted access. Owners can add and remove staff, change pricing, issue refunds, access all reports, and export data. There should typically be one or two owners per business. Manager sits in the middle. Managers can process sales, handle refunds and voids, view daily reports, and manage inventory — but they cannot add or remove other staff, change subscription settings, or access business-wide analytics. This is the right role for a trusted shift supervisor or store manager. Cashier is the most restricted role. Cashiers can process sales, scan items, accept payments, and send receipts. They cannot issue refunds, void transactions, view reports, or access any admin settings. This is the default role for part-time or new staff.
Magic link login explained
Traditional POS systems use PIN codes or passwords for staff login. PINs get shared, passwords get forgotten, and you end up with a sticky note on the till — which rather defeats the purpose of access control. AskBiz POS uses magic link login instead. When a staff member needs to sign in, they enter their email address and receive a one-time link via email. Tapping that link logs them in instantly, with the correct role and permissions already applied. There is nothing to remember, nothing to share, and the link expires after a short period, so even if it is intercepted it cannot be reused. For speed, staff who use the same device regularly can stay signed in between shifts, with the session expiring automatically after a configurable period of inactivity.
Setting up staff in AskBiz POS
To add a staff member, go to POS Settings and tap Add Staff. Enter their name and email address, choose their role (Owner, Manager, or Cashier), and tap Invite. They will receive an email with a magic link to set up their session. You can change someone's role at any time — useful when a cashier is promoted to manager, or when you need to temporarily elevate permissions for a specific shift. Removing a staff member revokes their access immediately; any active sessions are terminated. AskBiz logs every role change in the audit trail, so you always have a record of who had what access and when. If you run multiple locations in the future, staff can be assigned to specific sites with location-level permissions.