Roles and access

Who may do what.

Every employee holds one role or more. The role decides which screens open, and in a business with many outlets or warehouses, the location can be limited.

Built-in roles

The business owner gives each employee one role or more. On certain plans the owner can also create a custom role from one of these roles.

RolePermissionsLimited by locationApproval limit
Outlet CashierMake sales, Void receipts, Refund, Give discounts, Kitchen screenYes (Outlet)None
Warehouse / StockKitchen screen, View stock, Stock adjustment, Warehouse transfers, Kitchen ingredients and production, Production and toll processing, Manage products and warehouses, Manage menu and recipes, Delivery ordersYes (Warehouse, Outlet)None
SalesView stock, Quotations and invoicesNoNone
Sales ManagerMake sales, View sales, Void receipts, Refund, Give discounts, Approve voids and refunds, Kitchen screen, View stock, Kitchen ingredients and production, Manage menu and recipes, Quotations and invoices, Purchasing, Manage outlets, tables, and rental rates, Approvals, Outlet daily statusYes (Outlet, Warehouse)Rp100,000,000
PurchasingView stock, Stock adjustment, Warehouse transfers, Production and toll processing, Manage products and warehouses, PurchasingNoNone
Production Head / Rice MillWarehouse transfers, Production and toll processing, ApprovalsYes (Warehouse, Outlet)Rp100,000,000
Finance (Full)View sales, Delivery orders, Receive payments, Pay suppliers, Expense, Cash, bank, and journals, View profit and loss, Financial reports, TaxNoNone
Finance: Money InReceive payments, Financial reportsNoNone
Finance: Money OutPay suppliers, Financial reportsNoNone
Finance StaffReceive payments, Pay suppliers, Expense, Financial reportsNoNone
ExpensesExpenseNoNone
TaxFinancial reports, TaxNoNone
Human Resources & PayrollEmployees and payrollNoNone
DirectorAll permissionsNoNo limit
Commissioner (Owner)All permissionsNoNo limit
System AdminManage users and roles, Settings, backups, license, and subscriptionNoNone

Everyday permissions

Scope shows whether the permission applies per outlet, per warehouse, or to the whole business.

Cashier and tables

PermissionsNotesScope
Make salesOpen and close shifts, sell at the cashier, table bills, reservations, and rentals.Per outlet
View salesDrawer, shift, and receipts of all cashiers, rental occupancy, and the Oversight Report.Per outlet
Void receiptsYour own receipts always need approval from someone else.Per outlet
RefundYour own receipts always need approval from someone else.Per outlet
Give discountsApply discounts that the owner has set up.Per outlet
Approve voids and refundsApprove voids and refunds of other cashiers at their location.Per outlet
Outlet daily statusMark menus sold out, tables closed, and opening hours for today.Per outlet
Kitchen screenSee orders and mark them as served.Per outlet

Stock and kitchen

PermissionsNotesScope
View stockStock, stock cards, lots, movements, and inventory losses.Per warehouse
Stock adjustmentAdjustments and stock counts.Per warehouse
Warehouse transfersMove goods between warehouses.Per warehouse
Kitchen ingredients and productionIncoming ingredients, cash purchases, kitchen production, and recording waste.Per warehouse
Production and toll processingProduction, production output, and toll processing.Per warehouse
Manage products and warehousesAdd and edit products, categories, warehouses, and mills.Whole business
Manage menu and recipesMenu, menu options, photos, and recipes.Whole business

Sales and purchasing

PermissionsNotesScope
Quotations and invoicesCustomers, quotations, invoices, credit notes, delivery requests, and price lists.Whole business
Delivery ordersCreate and receive delivery orders from the warehouse.Per warehouse
PurchasingSuppliers, RFQs, purchase orders, goods receipts, and purchase returns.Whole business
Manage outlets, tables, and rental ratesOutlets, table layout, rental rates, and online ordering.Whole business

Approvals

PermissionsNotesScope
ApprovalsApprove documents up to the amount limit set by the directors.Outlets and warehouses

Money and reports

PermissionsNotesScope
Receive paymentsCustomer payments and advances.Whole business
Pay suppliersSupplier bills, payments, freight costs, and production costs.Whole business
ExpenseRecord expenses and depreciation.Whole business
Cash, bank, and journalsJournals, accounts, cost centers, reconciliation, loans, investments, assets, and prepaid expenses.Whole business
View profit and lossProfit and loss, profit per product, per outlet, and per department.Whole business
Profit of own outletOutlet profit at its location. Salary, PPh 21 allowance, and BPJS are combined into one line.Per outlet
Financial reportsBalance sheet, cash flow, general ledger, receivable and payable aging, free-form reports, calendar.Whole business

Tax and employees

PermissionsNotesScope
TaxVAT, income tax, PB1, Coretax files, and tax payments.Whole business
Employees and payrollEmployee data, attendance, and preparing payroll.Whole business

Protected permissions

These permissions can never be put into a custom role.

PermissionsNotes
Manage users and rolesAdd users and set their roles.
Settings, backups, license, and subscriptionBusiness settings, data backups, license, and subscription.
Unlimited approvals and approval rulesApprove financial documents without limit and set the approval flow.
Period lock and journal date changesLock accounting periods and change journal dates.
Cashier discount rulesSet the discounts that cashiers may apply.
Director summaries, dashboard, contracts, and audit trailSummaries for directors, dashboard, contracts, and audit trail.
Synchronization and background jobsSynchronization between devices and background jobs.
Nawasena vendor accessPublisher, implementation, and module screens for the vendor.

Rules that always apply

  • Only the owner (Commissioner) creates and changes roles.
  • The admin manages settings and users, but does not see business data.
  • Location limits are enforced on the server in every query, not only hidden on screen.
  • People who existed before location limits stay at All locations until the owner narrows them.
  • A receipt you made yourself cannot be cancelled or returned without approval from someone else.
  • The support team signs in only after the owner allows it for 24 hours, and every action is recorded.

Matrix version: 6.