Inviting staff and choosing what they can see

Everyone who uses a business signs in with their own account. You decide what each person can see and do in each module.

Inviting someone

1. In any module, open People → Invitations.
2. Enter the person’s email address and choose the roles they should have.
3. They get an email with a link. If they don’t have an account yet, they create one; if they do, the business appears in their business switcher.

You can resend or cancel an invitation that hasn’t been accepted.

Roles and permissions

Each module has its own roles. Open Settings → Roles & permissions in a module to see what each role allows, or to create your own.

A few principles help:

• Give the least access that does the job. A cashier needs the till, not the payroll.
• Use roles, not one-off permissions, so new staff in the same job get the same access.
• Separate preparing from approving. The person who prepares a pay run or a payment shouldn’t be the only person who approves it. Set this up under Settings → Approval workflows.

Access for each person

Settings → Access in each module shows who has access and with which roles, so you can review it in one place.

When someone leaves

When an employee’s employment ends, their access to the business ends with it. You can also remove a person’s access at any time from Settings → Access.

Two-factor sign-in

To protect the business, you can require everyone to sign in with two-factor authentication or a passkey.