Hi. How can we help?

Setting user roles and permissions

Getting started guide

In this article, learn about different types of users, their roles, and permissions per role. Create new users and adjust their permissions as needed. Navigate to other articles in the guide using the carousel below.

Understanding users and user roles

Users in Retail POS are the individual accounts associated with your staff members. Each user has an assigned user role which provides permissions for tasks specific to their user role.

There are three user roles that can be assigned to a user in Retail POS:

  • Cashier is the ideal user role to assign to your non-management sales staff.
    • Can process sales, transfer stock and close off the register
    • Restricted from management functions like adding and editing products or accessing reporting
  • Manager represents management staff.
    • Able to do everything a cashier can
    • Can access their assigned store's reporting
    • Can add/edit products if required
  • Admin is intended for the store owner or the head office account.
    • Full access to view and change all stores within the Retail POS account
    • Multiple admin users can be created

Every Retail POS account has an Account owner, which is accessed through the credentials used when signing up to Retail POS. The Account owner has the highest level of access, above an Admin user, which allows them to update billing contact details, change subscription payment details or plans, cancel the account, export critical data, or edit or transfer the Account owner role to another user. The Account owner has the authority to grant limited administrative rights to other users of the Retail POS account, including Admin-level users, and to give Lightspeed instructions in relation to the Retail POS Account.

By default, accounts subscribed to Lite and Pro plans, and Lean, Standard, and Advanced plans, will only have access to the Cashier, Manager, and Admin user roles. Accounts subscribed to an Enterprise plan can create additional custom user roles.

Creating a user (staff member)

By default, only Manager and Admin users can create or manage users. Once logged in, all users can edit their own profile and security information.

  1. Navigate to Setup > Users and click Add user. The Add Users button, found on the right, is highlighted to show its position in Retail POS.
  2. Enter the user details:
    1. Username: The name used to log in to Retail POS as the user.
    2. Display: The name that will appear on customer receipts, reports, and elsewhere in Retail POS.
    3. Email: The user's email address used for verification purposes.
    4. Profile image: The image that appears on login pages and user profiles.
    5. Outlets: Select the outlet you wish the user to have access to. If you'd like the user to access all outlets, click Select all outlets.
    6. Role: This dictates what permissions the user will have.
    7. Security and ID: Specify a password for the user. They will enter this password when signing in to your Retail POS store. The user can change this themselves later by navigating to Setup > Users when they're signed in.

    Add a further layer of security to Admin users by enabling multi-factor authentication once created. It is mandatory for all Retail POS accounts in Australia integrated with Xero to use multi-factor authentication for Admin users including the Account owner, in order to comply with Xero's global security standards. A new Admin user will be prompted to set up multi-factor authentication when logging in and cannot access the Retail POS store until completed.

  3. Click Save.

Adjusting user role permissions

User permissions can be edited for the cashier and manager roles to enable or deactivate certain capabilities within Retail POS. The Admin user role has fixed permissions and cannot be edited.

  1. Navigate to Setup > Users and click the Roles tab.Roles tab with list of available user roles.
  2. You will see the three available user roles. Click on Cashier or Manager to view the permissions enabled and disabled for that user role.

    Enterprise plans may have additional custom roles that can be edited.

On the roles page you can adjust the following permissions:

Product costs

Allows Cashiers or Managers to view and calculate product costs and markups on the sell screen, in the product catalog, in reporting, and in stock control. This is turned on by default for Managers and off by default for Cashiers. The Product Costs section showing the Show Product Costs option not checked off.


By default, Cashiers and Managers are allowed to print product labels. You can untick this option if you would like to prevent your Cashiers or Managers from printing labels. The Labels section showing the Print Labels option checked off.


Allow permissions to apply discounts on line items or to the entire sale. You can also set a discount limit to control how much discounting different roles are able to do. By default, discounts are turned on and maximum discounts are set to 100% for Managers and Cashiers. Admins can change these permissions as needed. The discounts section showing apply discounts on individual lines and entire sales checked off. Fields under each to enter the amount for each permission.


Customize the permissions for sale-related activities such as performing on account and layby sales, parking a sale, manually issuing store credit, processing returns and exchanges, editing and voiding sales, and register and cash operations. By default, all these options will be enabled for Managers. Manually issuing store credit and voiding and editing sales on sales ledger and sales history will be turned off by default for Cashiers.


The sell permission can also be disabled entirely for non-sales roles within your organization. Once the sell permission is disabled, that user role will no longer have access to the sell screen or eCom, if applicable. They have access to seeing sales history by default, but this permission can be turned off to disallow viewing sales history.

The sell section, with Create or continue sales not checked.

A tick (✔) or cross (X) next to a permission in the Other permissions section means that it is not customizable. This is a quick way to reference if a permission is or isn't available per role.


By default, Cashiers only have permissions to add new customers in Retail POS. They are not allowed to remove a customer or add one to a customer group. Managers have full permissions for changing, editing, and removing customers.

In this section, you can also customize whether Cashiers and Managers have the ability to export customer lists as a CSV and allow and edit customer on account limits. The Customers section showing the Export customer list option checked off.


Customize whether Cashiers and Managers can create, edit, and delete products, manually adjust inventory, create price books, and perform inventory counts, stock orders, and returns. By default, Managers will have all product-related permissions enabled. Cashiers will have inventory counts, stock orders and returns, and stock transfers enabled.

Admin roles can additionally select if a user can manually adjust inventory.

The Product section showing the Create and edit products, Delete products, Manually adjust inventory, Perform inventory counts, Perform supplier stock orders and returns, and Perform a stock order options checked off.


Specify which reports your users have access to. Selecting or deselect to allow users to view reports on sales they made or all sales made at assigned outlets, register closures reports, or inventory reports.

  • By deselecting View Lightspeed payments reports, the user won't have access to the LS Payments reports.
    • Managers can view these reports only for their assigned outlets if granted permission.
    • Cashiers won't have access, regardless of permissions.
  • By deselecting View sales reports, your user won't see the sales report in the Reporting section. The sales target and sales will no longer be available in the Home dashboard.
  • Deselecting the View inventory report removes access to the Inventory report. Your user can access other reports.
  • Deselecting the View register closures report allows the user to open and close their register and see the summary of that specific opening or closure. They won't see the summaries of register openings or closures from previous days. This provides you with more control over the data shared with your sales users.

The Reporting section showing the view sales reports and view Lightspeed Payments reports options.


All setup options are locked for Cashiers and cannot be changed. Managers are also locked out of most setup functions but can add and edit other Cashiers and Managers and manage quick keys. The Setup section showing the locked options for Cashiers and Managers.

Creating custom user roles

Merchants on Enterprise plans can create custom user roles to suit their needs.

  1. Navigate to Setup > Users > Roles.
  2. Click Add role.

    The roles page with add role button highlighted.

  3. Choose a name and whether you would like the new role to have Cashier or Manager default permissions.

    Create custom role page with field to enter a name and cards to select cashier or manager default permissions.

  4. Customize the permissions for the new role. For information on setting permissions, refer to the Adjusting user role permissions section of this article.
  5. Click Save.

Was this article helpful?