Roles & permissions
Let people do their job, and nothing beyond it.
Not everyone at the counter should be able to change a price or read the month's profit. CEMAC POS ships four roles that map to how a real shop is run, so each person signs in to a version of the app that shows only what their job needs and hides the rest.
The four roles
| Role | Typically can |
|---|---|
| Cashier | Ring up sales, take payment, print receipts |
| Manager | All cashier actions plus refunds, stock, and shop reports |
| Owner | Everything for their business, including finances and staff |
| Super admin | Platform-level administration across the service |
Why it protects the business
Limiting who can refund, void or discount removes the easiest routes to quiet loss. A cashier can serve customers all day without ever being able to erase a sale or reprice an item, while a manager keeps the powers needed to run the floor. The owner sees the whole picture; the cashier sees the queue in front of them.
- Sensitive actions such as refunds and price changes sit behind the manager and owner roles.
- Financial reports and staff management are reserved for the owner.
- Cashiers get a fast, focused sell screen without distracting controls.
- Access is decided by role, so promoting someone is a single change.
Tied to the tenant, not shared
CEMAC POS is multi-tenant: each business is walled off from every other. A role only ever grants access within the owner's own business, so a manager in one shop can never see another shop's data. The super admin role operates the platform itself and is not a back door into any single shop's private figures.
Roles and named staff accounts work together: the role decides what someone may do, and the audit trail records what they actually did. One controls access, the other keeps the receipts.
Because access is enforced on the server behind the API, not just hidden in the screen, a restricted user cannot reach a forbidden action by poking at the app. The rule holds whether they are online or working from the offline queue.
See it in your own shop
Start a free 30-day trial — no card required.