Understanding users and user roles

Users in Retail POS are the individual accounts associated with your staff members. Each user has an assigned user role which provides permissions for tasks specific to their user role.

There are three user roles that can be assigned to a user in Retail POS:

• Cashier is the ideal user role to assign to your non-management sales staff.
  • Can process sales, transfer stock and close off the register
  • Restricted from management functions like adding and editing products or accessing reporting
• Manager represents management staff.
  • Able to do everything a cashier can
  • Can access their assigned store's reporting
  • Can add/edit products if required
• Admin is intended for the store owner or the head office account.
  • Full access to view and change all stores within the Retail POS account
  • Multiple admin users can be created

Every Retail POS account has an Account owner, which is accessed through the credentials used when signing up to Retail POS. The Account owner has the highest level of access, above an Admin user, which allows them to update billing contact details, change subscription payment details or plans, cancel the account, export critical data, or edit or transfer the Account owner role to another user. The Account owner has the authority to grant limited administrative rights to other users of the Retail POS account, including Admin-level users, and to give Lightspeed instructions in relation to the Retail POS Account.

By default, accounts subscribed to Lite and Pro plans, and Lean, Standard, and Advanced plans, will only have access to the Cashier, Manager, and Admin user roles. Accounts subscribed to an Enterprise plan can create additional custom user roles.

Creating a user (staff member)

By default, only Manager and Admin users can create or manage users. Once logged in, all users can edit their own profile and security information.

1. Navigate to Setup > Users and click Add user.

   

2. Enter the user details:
   1. Username: The name used to log in to Retail POS as the user.
   2. Display: The name that will appear on customer receipts, reports, and elsewhere in Retail POS.
   3. Email: The user's email address used for verification purposes.
   4. Profile image: The image that appears on login pages and user profiles.
   5. Outlets: Select the outlet you wish the user to have access to. If you'd like the user to access all outlets, click Select all outlets.
   6. Role: This dictates what permissions the user will have.
   7. Security and ID: Specify a password for the user. They will enter this password when signing in to your Retail POS store. The user can change this themselves later by navigating to Setup > Users when they're signed in.

   Add a further layer of security to Admin users by enabling multi-factor authentication once created. It is mandatory for all Retail POS accounts in Australia integrated with Xero to use multi-factor authentication for Admin users including the Account owner, in order to comply with Xero's global security standards. A new Admin user will be prompted to set up multi-factor authentication when logging in and cannot access the Retail POS store until completed.

3. Click Save.

Adjusting user role permissions

User permissions can be edited for the cashier and manager roles to enable or deactivate certain capabilities within Retail POS. The Admin user role has fixed permissions and cannot be edited.

1. Navigate to Setup > Users and click the Roles tab.

   

2. You will see the three available user roles. Click on Cashier or Manager to view the permissions enabled and disabled for that user role.

   Enterprise plans may have additional custom roles that can be edited.

On the roles page you can adjust the following permissions:

Product costs

Allows Cashiers or Managers to view and calculate product costs and markups on the sell screen, in the product catalog, in reporting, and in stock control. This is turned on by default for Managers and off by default for Cashiers.

Labels

By default, Cashiers and Managers are allowed to print product labels. You can untick this option if you would like to prevent your Cashiers or Managers from printing labels.

Discounts

Allow permissions to apply discounts on line items or to the entire sale. You can also set a discount limit to control how much discounting different roles are able to do. By default, discounts are turned on and maximum discounts are set to 100% for Managers and Cashiers. Admins can change these permissions as needed.

Sell

Customize the permissions for sale-related activities such as performing on account and layby sales, parking a sale, manually issuing store credit, processing returns and exchanges, editing and voiding sales, and register and cash operations. By default, all these options will be enabled for Managers. Manually issuing store credit and voiding and editing sales on sales ledger and sales history will be turned off by default for Cashiers.

The sell permission can also be disabled entirely for non-sales roles within your organization. Once the sell permission is disabled, that user role will no longer have access to the sell screen or eCom, if applicable. They have access to seeing sales history by default, but this permission can be turned off to disallow viewing sales history.

A tick (✔) or cross (X) next to a permission in the Other permissions section means that it is not customizable. This is a quick way to reference if a permission is or isn't available per role.

Customers

By default, Cashiers only have permissions to add new customers in Retail POS. They are not allowed to remove a customer or add one to a customer group. Managers have full permissions for changing, editing, and removing customers.

In this section, you can also customize whether Cashiers and Managers have the ability to export customer lists as a CSV and allow and edit customer on account limits.

Products

Customize whether Cashiers and Managers can create, edit, and delete products, manually adjust inventory, create price books, and perform inventory counts, stock orders, and returns. By default, Managers will have all product-related permissions enabled. Cashiers will have inventory counts, stock orders and returns, and stock transfers enabled.

Admin roles can additionally select if a user can manually adjust inventory.

Reporting

Specify which reports your users have access to. Selecting or deselect to allow users to view reports on sales they made or all sales made at assigned outlets, register closures reports, or inventory reports.

• By deselecting View Lightspeed payments reports, the user won't have access to the LS Payments reports.
  • Managers can view these reports only for their assigned outlets if granted permission.
  • Cashiers won't have access, regardless of permissions.
• By deselecting View sales reports, your user won't see the sales report in the Reporting section. The sales target and sales will no longer be available in the Home dashboard.
• Deselecting the View inventory report removes access to the Inventory report. Your user can access other reports.
• Deselecting the View register closures report allows the user to open and close their register and see the summary of that specific opening or closure. They won't see the summaries of register openings or closures from previous days. This provides you with more control over the data shared with your sales users.

Setup

All setup options are locked for Cashiers and cannot be changed. Managers are also locked out of most setup functions but can add and edit other Cashiers and Managers and manage quick keys.

Creating custom user roles

Merchants on Enterprise plans can create custom user roles to suit their needs.

1. Navigate to Setup > Users > Roles.
2. Click Add role.

   

3. Choose a name and whether you would like the new role to have Cashier or Manager default permissions.

   

4. Customize the permissions for the new role. For information on setting permissions, refer to the Adjusting user role permissions section of this article.
5. Click Save.

Restricting user log in access

By restricting log in access, you'll prevent employees from accessing your Retail POS store remotely. Restricted users will only be able to log in from a device already logged in by an unrestricted user, like an Admin.

1. Log in to Retail POS as an Account Owner or Admin user.
2. Navigate to Setup > Security.

   

3. Under Log in access, select Only has access to log in through user switching.

   

4. Under Role specific settings, configure roles that require log in access by clicking the Log in access dropdown and selecting Has access to log in.

   

Once enabled, restricted users can't access Retail POS using login credentials. Restricted users must use user switching from an already logged in device.

Users must re-identify themselves after each sale by selecting their username or entering their username and password to prevent unauthorized access.